You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@rocketmq.apache.org by du...@apache.org on 2020/05/19 15:20:01 UTC

[rocketmq] branch develop updated: Fastjson has a serious security problem in 1.2.62, which will cause RCE

This is an automated email from the ASF dual-hosted git repository.

duhengforever pushed a commit to branch develop
in repository https://gitbox.apache.org/repos/asf/rocketmq.git


The following commit(s) were added to refs/heads/develop by this push:
     new a60d938  Fastjson has a serious security problem in 1.2.62,which will cause RCE
     new a7a979f  Merge pull request #2008 from wcc526/patch-2
a60d938 is described below

commit a60d93890351df5f4e82c748e38ef200f55c644b
Author: chi-chi weng <94...@qq.com>
AuthorDate: Mon May 18 19:46:45 2020 +0800

    Fastjson has a serious security problem in 1.2.62,which will cause RCE
    
    Fastjson has a serious security problem in 1.2.62,which will cause RCE
    
    Fix https://github.com/apache/rocketmq/issues/2007
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 2cab482..05f544c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -568,7 +568,7 @@
             <dependency>
                 <groupId>com.alibaba</groupId>
                 <artifactId>fastjson</artifactId>
-                <version>1.2.62</version>
+                <version>1.2.68</version>
             </dependency>
             <dependency>
                 <groupId>org.javassist</groupId>