[
https://issues.apache.org/jira/browse/GEODE-10687?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18133749#comment-18133749
]
ASF subversion and git services commented on GEODE-10687:
---------------------------------------------------------
Commit 06b981b9243c02d66f9f6751c4da34fe5e9913f3 in geode's branch
refs/heads/support/2.0 from Jinwoo Hwang
[ https://gitbox.apache.org/repos/asf?p=geode.git;h=06b981b924 ]
GEODE-10687: Upgrade ASM to 9.11 (#8140)
> Upgrade org.ow2.asm:asm to 9.11
> -------------------------------
>
> Key: GEODE-10687
> URL: https://issues.apache.org/jira/browse/GEODE-10687
> Project: Geode
> Issue Type: Improvement
> Reporter: Jinwoo Hwang
> Assignee: Jinwoo Hwang
> Priority: Major
>
> org.ow2.asm:[email protected] CVE remediation.
> Only asm, asm-commons, and asm-tree are pinned, which matches what appears in
> the classpath fixture files. If Jetty or another transitive ever pulls in
> asm-analysis or asm-util, they would not be covered by this pin.
> (credit:@utafrali)
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
