Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ARTEMIS-2470 Updated Apache BeanUtils to address CVE #2820

Closed
wants to merge 1 commit into from

Conversation

jeloba
Copy link
Contributor

@jeloba jeloba commented Sep 3, 2019

@brusdev
Copy link
Member

brusdev commented Sep 4, 2019

The main change from previous 1.9.3 to 1.9.4 is the addition of one code line in PropertyUtilsBean.java to suppress class level access. +1

Copy link
Contributor

@franz1981 franz1981 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM I'm gonna merge it

@franz1981
Copy link
Contributor

@jeloba thanks for the contribution!

@asfgit asfgit closed this in 0106329 Sep 4, 2019
@franz1981
Copy link
Contributor

franz1981 commented Sep 4, 2019

@jeloba Sorry I've merged it by accident..there are a couple of things I need you to do first:

I will ask more things when you've completed these ones 👍

@jeloba
Copy link
Contributor Author

jeloba commented Sep 4, 2019

@franz1981 Here is the issue: https://issues.apache.org/jira/browse/ARTEMIS-2470
I will send the ICLA as soon as possible.

@jeloba jeloba changed the title Updated Apache BeanUtils to address CVE ARTEMIS-2470 Updated Apache BeanUtils to address CVE Sep 4, 2019
@jeloba
Copy link
Contributor Author

jeloba commented Sep 9, 2019

@franz1981 ICLA is taken care of.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
3 participants