You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@geode.apache.org by Ankush Mittal <an...@adobe.com.INVALID> on 2023/12/01 11:24:30 UTC

Release schedule for 1.15.1 branch with fix for reported CVE

Hi All,

Fix for vulnerability related to shiro-core [0] [1], seems to be already merged in dev branch under commit [2].
Can someone please confirm if the vulnerabilities fix will make it to 1.15.1 as well and what will be the tentative release schedule of the same.
[3] doesn’t include the release schedule. Any inputs will be helpful in this regard.

-Thanks & Regards
Ankush Mittal
[0] https://nvd.nist.gov/vuln/detail/CVE-2023-34478
[1] https://nvd.nist.gov/vuln/detail/CVE-2023-22602
[2]https://github.com/apache/geode/commit/d1958146c12affb1fe3eabc5823bb4eeb6c0badc
[3] https://cwiki.apache.org/confluence/display/GEODE/Release+Schedule