You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@cassandra.apache.org by "Alex Petrov (Jira)" <ji...@apache.org> on 2020/04/20 15:51:00 UTC

[jira] [Updated] (CASSANDRA-15701) Does Cassandra 3.11.3/3.11.5 is affected by CVE-2019-10712 or not ?

     [ https://issues.apache.org/jira/browse/CASSANDRA-15701?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alex Petrov updated CASSANDRA-15701:
------------------------------------
    Resolution: Invalid
        Status: Resolved  (was: Triage Needed)

> Does  Cassandra 3.11.3/3.11.5  is affected by CVE-2019-10712 or not ?
> ---------------------------------------------------------------------
>
>                 Key: CASSANDRA-15701
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-15701
>             Project: Cassandra
>          Issue Type: Bug
>          Components: Dependencies
>            Reporter: wht
>            Priority: Normal
>
> Because  cassandra 3.11.3/3.11.5 rely on jackson-mapper-asl-1.9.13.jar which has been reported a vulnerability CVE-2019-10172, [https://nvd.nist.gov/vuln/detail/CVE-2019-10172], so I want to know if it has an impact to cassandra. Thanks!



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org