You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@ofbiz.apache.org by "Jacques Le Roux (JIRA)" <ji...@apache.org> on 2016/12/27 09:50:58 UTC
[jira] [Created] (OFBIZ-9156) Update antisamy-bin.1.2.jar in R13.07
because of CVE-2016-10006
Jacques Le Roux created OFBIZ-9156:
--------------------------------------
Summary: Update antisamy-bin.1.2.jar in R13.07 because of CVE-2016-10006
Key: OFBIZ-9156
URL: https://issues.apache.org/jira/browse/OFBIZ-9156
Project: OFBiz
Issue Type: Task
Components: framework
Affects Versions: Release Branch 13.07
Reporter: Jacques Le Roux
Assignee: Jacques Le Roux
Priority: Minor
Fix For: Release Branch 13.07
I know the R13.07 branch will no longer be released but in case people are using it directly from the svn branch, I'll update antisamy-bin.1.2.jar to antisamy-bin.1.5.jar because of https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10006
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)