You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tomee.apache.org by rz...@apache.org on 2022/10/25 08:01:23 UTC
[tomee-site-generator] branch main updated: Make additional information more visible for TomEE 8.0.13
This is an automated email from the ASF dual-hosted git repository.
rzo1 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomee-site-generator.git
The following commit(s) were added to refs/heads/main by this push:
new c27c83b Make additional information more visible for TomEE 8.0.13
c27c83b is described below
commit c27c83bc3d45909ccbdb85d0e0880a8fe6b3d87b
Author: Richard Zowalla <ri...@hs-heilbronn.de>
AuthorDate: Tue Oct 25 10:01:15 2022 +0200
Make additional information more visible for TomEE 8.0.13
---
src/main/jbake/content/8.0.13/release-notes.adoc | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/src/main/jbake/content/8.0.13/release-notes.adoc b/src/main/jbake/content/8.0.13/release-notes.adoc
index b479145..a277676 100644
--- a/src/main/jbake/content/8.0.13/release-notes.adoc
+++ b/src/main/jbake/content/8.0.13/release-notes.adoc
@@ -77,8 +77,8 @@ Thank you to everyone who contributed to this release, including all of our user
== Additional Information
-Please note:
+**Please note:**
-- (1) CVE-2022-42003 (jackson-databind): Users are only affected, if `UNWRAP_SINGLE_VALUE_ARRAYS` is enabled. Mitigation is included in 2.14.0-rc1. As per list discussion we are fine shipping an RC version.
+IMPORTANT: (1) CVE-2022-42003 (jackson-databind): Users are only affected, if `UNWRAP_SINGLE_VALUE_ARRAYS` is enabled. Mitigation is included in 2.14.0-rc1. As per list discussion we are fine shipping an RC version.
-- (2) CVE-2022-41853 (hsqldb): As v2.7.1 wasn't available at voting time, TomEE sets "hsqldb.method_class_names" to an invalid value to mitigate the vulnerability. Users can override the property as needed.
\ No newline at end of file
+IMPORTANT: (2) CVE-2022-41853 (hsqldb): As v2.7.1 wasn't available at voting time, TomEE sets "hsqldb.method_class_names" to an invalid value to mitigate the vulnerability. Users can override the property as needed.
\ No newline at end of file