You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@qpid.apache.org by "PJ Fanning (Jira)" <ji...@apache.org> on 2022/03/30 13:55:00 UTC

[jira] [Updated] (QPID-8579) [AMQP-J] main branch uses many insecure libs

     [ https://issues.apache.org/jira/browse/QPID-8579?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

PJ Fanning updated QPID-8579:
-----------------------------
    Description: 
```
    <logback-version>1.2.3</logback-version>
    <guava-version>27.0-jre</guava-version>
    <fasterxml-jackson-version>2.10.4</fasterxml-jackson-version>
    <httpclient-version>4.5.3</httpclient-version>
```

All of these have open CVEs

https://github.com/apache/qpid-jms-amqp-0-x/blob/main/pom.xml


  was:
```
    <logback-version>1.2.3</logback-version>
    <guava-version>27.0-jre</guava-version>
    <fasterxml-jackson-version>2.10.4</fasterxml-jackson-version>
    <httpclient-version>4.5.3</httpclient-version>
```

All of these have open CVEs



> [AMQP-J] main branch uses many insecure libs
> --------------------------------------------
>
>                 Key: QPID-8579
>                 URL: https://issues.apache.org/jira/browse/QPID-8579
>             Project: Qpid
>          Issue Type: Improvement
>            Reporter: PJ Fanning
>            Priority: Major
>
> ```
>     <logback-version>1.2.3</logback-version>
>     <guava-version>27.0-jre</guava-version>
>     <fasterxml-jackson-version>2.10.4</fasterxml-jackson-version>
>     <httpclient-version>4.5.3</httpclient-version>
> ```
> All of these have open CVEs
> https://github.com/apache/qpid-jms-amqp-0-x/blob/main/pom.xml



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org