You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@camel.apache.org by Colm O hEigeartaigh <co...@apache.org> on 2022/02/17 15:19:49 UTC

Backport XStream 1.4.19 to camel-3.11.x?

Hi,

Are there any objections to backporting the XStream 1.4.19 bump to
camel-3.11.x? There are CVE fixes -
https://x-stream.github.io/security.html

Colm.

Re: Backport XStream 1.4.19 to camel-3.11.x?

Posted by Colm O hEigeartaigh <co...@apache.org>.
OK thanks, I backported the update.

Colm.

On Thu, Feb 17, 2022 at 4:51 PM Jean-Baptiste Onofré <jb...@nanthrax.net> wrote:
>
> Yeah, it makes sense to me.
>
> Regards
> JB
>
> On Thu, Feb 17, 2022 at 4:19 PM Colm O hEigeartaigh <co...@apache.org> wrote:
> >
> > Hi,
> >
> > Are there any objections to backporting the XStream 1.4.19 bump to
> > camel-3.11.x? There are CVE fixes -
> > https://x-stream.github.io/security.html
> >
> > Colm.

Re: Backport XStream 1.4.19 to camel-3.11.x?

Posted by Jean-Baptiste Onofré <jb...@nanthrax.net>.
Yeah, it makes sense to me.

Regards
JB

On Thu, Feb 17, 2022 at 4:19 PM Colm O hEigeartaigh <co...@apache.org> wrote:
>
> Hi,
>
> Are there any objections to backporting the XStream 1.4.19 bump to
> camel-3.11.x? There are CVE fixes -
> https://x-stream.github.io/security.html
>
> Colm.

Re: Backport XStream 1.4.19 to camel-3.11.x?

Posted by Claus Ibsen <cl...@gmail.com>.
Yeah that is a good idea

On Thu, Feb 17, 2022 at 4:20 PM Colm O hEigeartaigh <co...@apache.org> wrote:
>
> Hi,
>
> Are there any objections to backporting the XStream 1.4.19 bump to
> camel-3.11.x? There are CVE fixes -
> https://x-stream.github.io/security.html
>
> Colm.



-- 
Claus Ibsen
-----------------
http://davsclaus.com @davsclaus
Camel in Action 2: https://www.manning.com/ibsen2