You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@activemq.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2019/09/09 07:18:00 UTC
[jira] [Work logged] (ARTEMIS-2470) Update Apache BeanUtils to
Address CVE-2014-0114
[ https://issues.apache.org/jira/browse/ARTEMIS-2470?focusedWorklogId=308658&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-308658 ]
ASF GitHub Bot logged work on ARTEMIS-2470:
-------------------------------------------
Author: ASF GitHub Bot
Created on: 09/Sep/19 07:17
Start Date: 09/Sep/19 07:17
Worklog Time Spent: 10m
Work Description: jeloba commented on issue #2820: ARTEMIS-2470 Updated Apache BeanUtils to address CVE
URL: https://github.com/apache/activemq-artemis/pull/2820#issuecomment-529332064
@franz1981 ICLA is taken care of.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Issue Time Tracking
-------------------
Worklog Id: (was: 308658)
Remaining Estimate: 0h
Time Spent: 10m
> Update Apache BeanUtils to Address CVE-2014-0114
> ------------------------------------------------
>
> Key: ARTEMIS-2470
> URL: https://issues.apache.org/jira/browse/ARTEMIS-2470
> Project: ActiveMQ Artemis
> Issue Type: Improvement
> Affects Versions: 2.10.0
> Reporter: Jan Boehm
> Priority: Major
> Time Spent: 10m
> Remaining Estimate: 0h
>
> Apache BeanUtils 1.9.3 was flagged for CVE-2014-0114. Version 1.9.4 fixes this issue. Since there are no other changes in the library a simple version bump suffices.
--
This message was sent by Atlassian Jira
(v8.3.2#803003)