[
https://issues.apache.org/jira/browse/GEODE-10687?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jinwoo Hwang updated GEODE-10687:
---------------------------------
Description:
org.ow2.asm:[email protected] CVE remediation.
Only asm, asm-commons, and asm-tree are pinned, which matches what appears in
the classpath fixture files. If Jetty or another transitive ever pulls in
asm-analysis or asm-util, they would not be covered by this pin.
(credit:@utafrali)
was:org.ow2.asm:[email protected] CVE remediation
> Upgrade org.ow2.asm:asm to 9.11
> -------------------------------
>
> Key: GEODE-10687
> URL: https://issues.apache.org/jira/browse/GEODE-10687
> Project: Geode
> Issue Type: Improvement
> Reporter: Jinwoo Hwang
> Assignee: Jinwoo Hwang
> Priority: Major
>
> org.ow2.asm:[email protected] CVE remediation.
> Only asm, asm-commons, and asm-tree are pinned, which matches what appears in
> the classpath fixture files. If Jetty or another transitive ever pulls in
> asm-analysis or asm-util, they would not be covered by this pin.
> (credit:@utafrali)
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
