You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@ofbiz.apache.org by "Aditi Patel (Jira)" <ji...@apache.org> on 2026/07/29 06:53:00 UTC

[jira] [Commented] (OFBIZ-12845) Update commons-net to 3.9.0

    [ https://issues.apache.org/jira/browse/OFBIZ-12845?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18099958#comment-18099958 ] 

Aditi Patel commented on OFBIZ-12845:
-------------------------------------

I noticed this one appears to have been completed already: the update to commons-net 3.9.0 was committed back in August 2023, to trunk (commit 125f6231db) and release22.01 (commit 9193de37d1), which addressed CVE-2021-37533. Trunk has since moved further along and is currently on commons-net 3.13.0 (in dependencies.gradle). Closing the ticket. 

> Update commons-net to 3.9.0
> ---------------------------
>
>                 Key: OFBIZ-12845
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12845
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: framework
>    Affects Versions: 22.01.01
>            Reporter: Gil Portenseigne
>            Priority: Major
>             Fix For: Upcoming Branch
>
>
> Update to last current release fixing [CVE-2021-37533|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37533]
> https://lists.apache.org/thread/vys2q39lrkyqcyr7rhj9308c4rpq8kkm



--
This message was sent by Atlassian Jira
(v8.20.10#820010)