You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@servicemix.apache.org by "Freeman Yue Fang (Jira)" <ji...@apache.org> on 2020/02/03 14:41:00 UTC
[jira] [Assigned] (SM-4312) Upgrade spring-batch from 4.0.1 to
4.0.2 to address CVE-2019-3774
[ https://issues.apache.org/jira/browse/SM-4312?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Freeman Yue Fang reassigned SM-4312:
------------------------------------
Assignee: Freeman Yue Fang
> Upgrade spring-batch from 4.0.1 to 4.0.2 to address CVE-2019-3774
> -----------------------------------------------------------------
>
> Key: SM-4312
> URL: https://issues.apache.org/jira/browse/SM-4312
> Project: ServiceMix
> Issue Type: Bug
> Reporter: Luigi De Masi
> Assignee: Freeman Yue Fang
> Priority: Major
>
> A new security issue has been discovered on spring-batch versions 3.0.9, 4.0.1, 4.1.0 and older, described in [this|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3774] security report.
> According [Pivotal Vulnerability Report|https://pivotal.io/security/cve-2019-3774], to address this issue it needs to upgrade to 4.0.2 version.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)