You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@atlas.apache.org by "Apoorv Naik (JIRA)" <ji...@apache.org> on 2018/05/10 17:12:00 UTC

[jira] [Created] (ATLAS-2671) Version upgrade to mitigate CVE

Apoorv Naik created ATLAS-2671:
----------------------------------

             Summary: Version upgrade to mitigate CVE
                 Key: ATLAS-2671
                 URL: https://issues.apache.org/jira/browse/ATLAS-2671
             Project: Atlas
          Issue Type: Improvement
            Reporter: Apoorv Naik
            Assignee: Apoorv Naik
             Fix For: 1.0.0
         Attachments: 0001-CVE-Jackson-and-Lucene-dependency-upgrade.patch, 0002-CVE-Spring-upgrades.patch

Spring and Jackson have certain CVEs related to remote code execution. Upgrading the versions would resolve this vulnerability.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)