You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@tomee.apache.org by "Richard Zowalla (Jira)" <ji...@apache.org> on 2022/12/15 06:43:00 UTC

[jira] [Created] (TOMEE-4127) CXF 3.5.5

Richard Zowalla created TOMEE-4127:
--------------------------------------

             Summary: CXF 3.5.5
                 Key: TOMEE-4127
                 URL: https://issues.apache.org/jira/browse/TOMEE-4127
             Project: TomEE
          Issue Type: Dependency upgrade
          Components: TomEE Core Server
    Affects Versions: 9.0.0.RC1
            Reporter: Richard Zowalla


December 13, 2022 - Apache CXF 3.5.5 and 3.4.10 released!
The Apache CXF team is proud to announce the availability of our latest patch releases!  Over 9 JIRA issues were fixed for 3.5.5 and 3.4.10. Two new CVEs were issued for vulnerabilities fixed in these releases:

CVE-2022-46363: Apache CXF directory listing / code exfiltration
CVE-2022-46364: Apache CXF SSRF Vulnerability




--
This message was sent by Atlassian Jira
(v8.20.10#820010)