From 193644373cb86f3c0224500f74ca3ab70ad1031e Mon Sep 17 00:00:00 2001
From: Torsten Friebe <friebe@lat-lon.de>
Date: Wed, 13 Nov 2024 11:09:09 +0100
Subject: [PATCH 1/3] Upgraded primefaces to 14.0.6 - fixes CVSS 10 error

---
 deegree-services/deegree-webservices/pom.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/deegree-services/deegree-webservices/pom.xml b/deegree-services/deegree-webservices/pom.xml
index 453dcaa6b4..ffdc5b5496 100644
--- a/deegree-services/deegree-webservices/pom.xml
+++ b/deegree-services/deegree-webservices/pom.xml
@@ -278,12 +278,12 @@
     <dependency>
       <groupId>org.primefaces</groupId>
       <artifactId>primefaces</artifactId>
-      <version>13.0.6</version>
+      <version>14.0.6</version>
     </dependency>
     <dependency>
       <groupId>org.primefaces.extensions</groupId>
       <artifactId>primefaces-extensions</artifactId>
-      <version>13.0.6</version>
+      <version>14.0.6</version>
     </dependency>
     <dependency>
       <groupId>org.slf4j</groupId>

From 6eaf9b0f31c32fd4fd99dfc14b648e5c8b2e7741 Mon Sep 17 00:00:00 2001
From: Torsten Friebe <friebe@lat-lon.de>
Date: Wed, 13 Nov 2024 11:09:36 +0100
Subject: [PATCH 2/3] Upgraded Spring Framework to latest bugfix version

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 2f3594261e..ecd4e98846 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1231,7 +1231,7 @@
     <slf4j.version>1.7.36</slf4j.version>
     <spring-boot.version>2.7.18</spring-boot.version>
     <spring-batch.version>4.3.10</spring-batch.version>
-    <spring-framework.version>5.3.36</spring-framework.version>
+    <spring-framework.version>5.3.39</spring-framework.version>
     <batik.version>1.17</batik.version>
     <axoim.version>1.2.22</axoim.version>
     <jsonpath.version>2.9.0</jsonpath.version>

From 103f135aee7c16380ea7643837d4b32ea51509e9 Mon Sep 17 00:00:00 2001
From: Torsten Friebe <friebe@lat-lon.de>
Date: Wed, 13 Nov 2024 11:10:19 +0100
Subject: [PATCH 3/3] Upgraded owasp plugin to latest version

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index ecd4e98846..5412691c39 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1319,7 +1319,7 @@
           <plugin>
             <groupId>org.owasp</groupId>
             <artifactId>dependency-check-maven</artifactId>
-            <version>9.0.9</version>
+            <version>11.1.0</version>
             <configuration>
               <cveValidForHours>24</cveValidForHours>
               <knownExploitedEnabled>false</knownExploitedEnabled>