[
https://issues.apache.org/jira/browse/CASSANDRA-18146?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17676296#comment-17676296
] Brandon Williams commented on CASSANDRA-18146: ---------------------------------------------- Patches to suppress. ||Branch||CI|| |[3.0|https://github.com/driftx/cassandra/tree/CASSANDRA-18146-3.0]|[j8|https://app.circleci.com/pipelines/github/driftx/cassandra/761/workflows/3bab9a0d-22c2-4383-af47-7c795f270341]| |[3.11|https://github.com/driftx/cassandra/tree/CASSANDRA-18146-3.11]|[j8|https://app.circleci.com/pipelines/github/driftx/cassandra/759/workflows/592aab33-153e-41ba-9bb4-f3a1f3846538]| |[4.0|https://github.com/driftx/cassandra/tree/CASSANDRA-18146-4.0]|[j8|https://app.circleci.com/pipelines/github/driftx/cassandra/762/workflows/bd2fa3ca-8e02-4910-9cab-39f71b3b1bd9], [j11|https://app.circleci.com/pipelines/github/driftx/cassandra/760/workflows/205a2d88-e28a-48c2-a5ad-1b281a5cf963]| |[4.1|https://github.com/driftx/cassandra/tree/CASSANDRA-18146-4.1]|[j8|https://app.circleci.com/pipelines/github/driftx/cassandra/763/workflows/68abb0f7-d583-447d-ba82-c85beb769c35], [j11|https://app.circleci.com/pipelines/github/driftx/cassandra/763/workflows/bd663f65-d0aa-479e-837a-e238480eba31]| |[trunk|https://github.com/driftx/cassandra/tree/CASSANDRA-18146-trunk]|[j8|https://app.circleci.com/pipelines/github/driftx/cassandra/760/workflows/18ee3008-8517-4ca2-b1d4-d1ab99683093], [j11|https://app.circleci.com/pipelines/github/driftx/cassandra/760/workflows/205a2d88-e28a-48c2-a5ad-1b281a5cf963]| > commons-cli vulnerability: CVE-2021-37533 > ----------------------------------------- > > Key: CASSANDRA-18146 > URL: https://issues.apache.org/jira/browse/CASSANDRA-18146 > Project: Cassandra > Issue Type: Bug > Components: Dependencies > Reporter: Brandon Williams > Assignee: Brandon Williams > Priority: Normal > Fix For: 3.0.x, 3.11.x, 4.0.x, 4.1.x, 4.x > > > This CVE is being reported by the OWASP scan for: > commons-cli-1.1.jar: CVE-2021-37533 > commons-codec-1.9.jar: CVE-2021-37533 > commons-math3-3.2.jar: CVE-2021-37533 > additionally commons-lang3-3.1.jar is also reported on 3.x. -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
