You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@camel.apache.org by "ppalaga (via GitHub)" <gi...@apache.org> on 2023/05/17 10:14:47 UTC

[GitHub] [camel-quarkus] ppalaga commented on pull request #4902: Bump xalan from version 2.7.2 to version 2.7.3

ppalaga commented on PR #4902:
URL: https://github.com/apache/camel-quarkus/pull/4902#issuecomment-1551124005

   > There is, however, a major concern here: [CVE-2022-34169](https://nvd.nist.gov/vuln/detail/CVE-2022-34169). For me, it is unclear whether the issue is **actually** fixed in `2.7.3`, or whether it is just "gone" due to the missing dependencies.
   
   The fix commit seems to be this one https://github.com/apache/xalan-java/commit/2e60d0a9a5b822c4abf9051857973b1c6babfe81 
   That's definitely in Xalan.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@camel.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org