Re: (tomcat) branch 9.0.x updated: Update CXF to 3.6.12

On 14/08/2026 09:00, [email protected] wrote:
> This is an automated email from the ASF dual-hosted git repository.
> 
> markt-asf pushed a commit to branch 9.0.x
> in repository https://gitbox.apache.org/repos/asf/tomcat.git
> 
> 
> The following commit(s) were added to refs/heads/9.0.x by this push:
>       new 5341041c4e Update CXF to 3.6.12
> 5341041c4e is described below
> 
> commit 5341041c4ea28f7b7401047031d860df0f9d1e85
> Author: Mark Thomas <[email protected]>
> AuthorDate: Fri Aug 14 08:59:55 2026 +0100
> 
>      Update CXF to 3.6.12

A CVE has been announced for 3.6.11. Is there anything else I need to do 
apart from update the version here?

Mark


> ---
>   modules/cxf/pom.xml | 2 +-
>   1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/modules/cxf/pom.xml b/modules/cxf/pom.xml
> index ac93152271..1b1ec35733 100644
> --- a/modules/cxf/pom.xml
> +++ b/modules/cxf/pom.xml
> @@ -29,7 +29,7 @@
>       <name>Apache CXF for Apache Tomcat CDI</name>
>       <description>Apache CXF packaged for Apache Tomcat CDI</description>
>       <!-- This is the Apache CXF version -->
> -    <version>3.6.11</version>
> +    <version>3.6.12</version>
>       <packaging>jar</packaging>
>   
>       <properties>
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>