Update jose4j 0.9.6

tomitribe · Mar 11, 2024 · 843283d · 843283d
1 parent 302644b
commit 843283d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/mp-jwt/pom.xml b/mp-jwt/pom.xml
@@ -72,7 +72,7 @@
     <dependency>
       <groupId>org.bitbucket.b_c</groupId>
       <artifactId>jose4j</artifactId>
-      <version>0.9.3</version>
+      <version>0.9.6</version>
     </dependency>
   </dependencies>
 </project>
diff --git a/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-7.0.x b/tomee/apache-tomee/src/main/resources/META-INF/release_notes/RELEASE-NOTES-EAP-7.0.x
@@ -2,6 +2,7 @@
 
 === Changes in TomEE EAP 7.1.5-TT.25
 * Update to Tomcat 8.5.99
+* Update jose4j 0.9.6 to mitigate CVE-2023-51775
 
 === Changes in TomEE EAP 7.1.5-TT.24
 * Update to Tomcat 8.5.96 to mitigate CVE-2023-42795