You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@servicemix.apache.org by RayG <ra...@smartstream-stp.com> on 2016/07/13 14:44:51 UTC

ServiceMix and Spring version

Hi

After reviewing the currently released versions of ServiceMix (5.4.3 -
7.0.0M2), it appears they all use Spring 3.2.14.  There seems to be a
security issue (http://pivotal.io/security/cve-2015-5211) on a number of
framework versions including 3.2.14, so could anyone tell me if a) there is
a version of ServiceMix which uses 3.2.15+, b) whether it is safe/possible
to patch 3.2.15 into one of the current ServiceMix offerings, or c) there is
another alternative.

Many thanks for your help.
R.




--
View this message in context: http://servicemix.396122.n5.nabble.com/ServiceMix-and-Spring-version-tp5723868.html
Sent from the ServiceMix - Dev mailing list archive at Nabble.com.