From 1efe7d187119190be47c062ebbd25ab6e7c6e042 Mon Sep 17 00:00:00 2001
From: Lukas Jungmann <lukas.jungmann@oracle.com>
Date: Tue, 17 Oct 2023 21:58:37 +0200
Subject: [PATCH] Integrate jaxws-ri 4.0.2

Signed-off-by: Lukas Jungmann <lukas.jungmann@oracle.com>
---
 _security-extras/keyidspi-ibm-impl/pom.xml | 8 ++++----
 wsit/boms/bom-ext/pom.xml                  | 2 +-
 wsit/boms/bom/pom.xml                      | 2 +-
 wsit/src/main/resources/suppression.xml    | 7 +++++++
 4 files changed, 13 insertions(+), 6 deletions(-)

diff --git a/_security-extras/keyidspi-ibm-impl/pom.xml b/_security-extras/keyidspi-ibm-impl/pom.xml
index 8a306b137..33edc42e3 100644
--- a/_security-extras/keyidspi-ibm-impl/pom.xml
+++ b/_security-extras/keyidspi-ibm-impl/pom.xml
@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <!--
 
-    Copyright (c) 1997, 2018 Oracle and/or its affiliates
+    Copyright (c) 1997, 2023 Oracle and/or its affiliates
 
     This program and the accompanying materials are made available under the
     terms of the Eclipse Distribution License v. 1.0, which is available at
@@ -19,7 +19,7 @@
     <parent>
         <groupId>org.eclipse.ee4j</groupId>
         <artifactId>project</artifactId>
-        <version>1.0.5</version>
+        <version>1.0.8</version>
     </parent>
 
     <groupId>org.glassfish.metro</groupId>
@@ -29,7 +29,7 @@
 
     <name>Key Identifier SPI Implementation for IBM JDK</name>
     <description>
-        Formely com.sun.xml.wss.core.reference:keyidspi-ibm-impl:1.0,
+        Formerly com.sun.xml.wss.core.reference:keyidspi-ibm-impl:1.0,
         provides JRE vendor specific implementation of
         com.sun.xml.wss.core.reference.KeyIdentifierSPI SPI.
     </description>
@@ -70,7 +70,7 @@
         <dependency>
             <groupId>org.glassfish.metro</groupId>
             <artifactId>wssx-impl</artifactId>
-            <version>2.4.3</version>
+            <version>2.4.4</version>
         </dependency>
     </dependencies>
 
diff --git a/wsit/boms/bom-ext/pom.xml b/wsit/boms/bom-ext/pom.xml
index e4377f731..b42897a17 100644
--- a/wsit/boms/bom-ext/pom.xml
+++ b/wsit/boms/bom-ext/pom.xml
@@ -49,7 +49,7 @@
 
         <hk2.version>3.0.5</hk2.version>
         <grizzly.version>4.0.1</grizzly.version>
-        <tomcat.coyote.version>10.1.14</tomcat.coyote.version>
+        <tomcat.coyote.version>10.1.15</tomcat.coyote.version>
         <graal.sdk.version>22.3.3</graal.sdk.version>
 
         <junit.version>4.13.2</junit.version>
diff --git a/wsit/boms/bom/pom.xml b/wsit/boms/bom/pom.xml
index a399e6a2d..9b7099c20 100644
--- a/wsit/boms/bom/pom.xml
+++ b/wsit/boms/bom/pom.xml
@@ -53,7 +53,7 @@
     </developers>
 
     <properties>
-        <jaxws.ri.version>4.0.1</jaxws.ri.version>
+        <jaxws.ri.version>4.0.2</jaxws.ri.version>
     </properties>
 
     <dependencyManagement>
diff --git a/wsit/src/main/resources/suppression.xml b/wsit/src/main/resources/suppression.xml
index 32cb2dafc..a7cf9e00a 100644
--- a/wsit/src/main/resources/suppression.xml
+++ b/wsit/src/main/resources/suppression.xml
@@ -20,4 +20,11 @@
         <cve>CVE-2022-37422</cve>
         <cve>CVE-2022-45129</cve>
     </suppress>
+    <suppress>
+        <notes><![CDATA[
+      file name: tomcat-coyote-10.1.15.jar
+      ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.apache\.tomcat/tomcat-coyote@.*$</packageUrl>
+        <cve>CVE-2023-42794</cve>
+    </suppress>
 </suppressions>
\ No newline at end of file