This is an automated email from the ASF dual-hosted git repository.

davsclaus pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/camel.git


The following commit(s) were added to refs/heads/master by this push:
     new 8dc0f60  Old Fastjson has a serious security problem (#3844)
8dc0f60 is described below

commit 8dc0f6064f091501650e68f9b9bd5a62d3db9c80
Author: chi-chi weng <949409...@qq.com>
AuthorDate: Wed May 20 20:09:00 2020 +0800

    Old Fastjson has a serious security problem (#3844)
    
    Old version Fastjson has a serious security problem, which will cause RCE
    https://www.anquanke.com/post/id/199527
    https://www.cnblogs.com/tr1ple/p/12348886.html
    https://github.com/jas502n/fastjson-1.2.58-rce
---
 camel-dependencies/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/camel-dependencies/pom.xml b/camel-dependencies/pom.xml
index 00d3fa6..4984431 100644
--- a/camel-dependencies/pom.xml
+++ b/camel-dependencies/pom.xml
@@ -186,7 +186,7 @@
     <exec-maven-plugin-version>1.6.0</exec-maven-plugin-version>
     <fabric8-maven-plugin-version>4.4.0</fabric8-maven-plugin-version>
     <facebook4j-core-version>2.4.13</facebook4j-core-version>
-    <fastjson-version>1.2.62</fastjson-version>
+    <fastjson-version>1.2.68</fastjson-version>
     <felix-configadmin-version>1.8.8</felix-configadmin-version>
     <felix-connect-version>0.2.0</felix-connect-version>
     <felix-fileinstall-version>3.5.2</felix-fileinstall-version>

Reply via email to