You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@chukwa.apache.org by "Eric Yang (JIRA)" <ji...@apache.org> on 2013/07/01 07:17:20 UTC

[jira] [Commented] (CHUKWA-689) Fix frame injection vulnerability in Javadoc for Chukwa API docs

    [ https://issues.apache.org/jira/browse/CHUKWA-689?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13696585#comment-13696585 ] 

Eric Yang commented on CHUKWA-689:
----------------------------------

Docs has been regenerated, waiting for infrastructure to enable svnpubsub.  I will close this task once svnpubsub is resolved.
                
> Fix frame injection vulnerability in Javadoc for Chukwa API docs
> ----------------------------------------------------------------
>
>                 Key: CHUKWA-689
>                 URL: https://issues.apache.org/jira/browse/CHUKWA-689
>             Project: Chukwa
>          Issue Type: Task
>          Components: Documentation
>    Affects Versions: 0.3.0, 0.4.0, 0.5.0
>            Reporter: Eric Yang
>            Assignee: Eric Yang
>
> Oracle has announced [1], [2] a frame injection vulnerability in Javadoc
> generated by Java 5, Java 6 and Java 7 before update 22.
> We should regenerate javadocs for all previous Chukwa releases.
> [1] http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html
> [2] http://www.kb.cert.org/vuls/id/225657

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira