You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@tomee.apache.org by "Richard Zowalla (Jira)" <ji...@apache.org> on 2023/05/17 19:26:00 UTC

[jira] [Resolved] (TOMEE-2362) Upgrade SL4J to mitigate CVE-2018-8088

     [ https://issues.apache.org/jira/browse/TOMEE-2362?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Richard Zowalla resolved TOMEE-2362.
------------------------------------
    Resolution: Auto Closed

> Upgrade SL4J to mitigate CVE-2018-8088
> --------------------------------------
>
>                 Key: TOMEE-2362
>                 URL: https://issues.apache.org/jira/browse/TOMEE-2362
>             Project: TomEE
>          Issue Type: Dependency upgrade
>          Components: TomEE Core Server
>    Affects Versions: 7.0.5, 7.1.0, 8.0.0-M1
>            Reporter: Richard Zowalla
>            Priority: Major
>              Labels: security
>
> I will open this issue as an reminder as *no release version* (besides BETA releases) is available for now.
> We need to upgrade SL4J to mitigate CVE-2018-8088 (see [https://nvd.nist.gov/vuln/detail/CVE-2018-8088]) in the near future.
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)