[ 
https://issues.apache.org/jira/browse/CASSANDRA-18148?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Brandon Williams updated CASSANDRA-18148:
-----------------------------------------
          Fix Version/s: 3.0.29
                         3.11.15
                         4.0.8
                         4.1.1
                         4.2
                             (was: 3.0.x)
                             (was: 4.x)
                             (was: 3.11.x)
                             (was: 4.0.x)
                             (was: 4.1.x)
          Since Version: NA
    Source Control Link: 
https://github.com/apache/cassandra/commit/fe71dfd7a15ded62b70eee4a2981d54baf35be8d
             Resolution: Fixed
                 Status: Resolved  (was: Ready to Commit)

bq. where the merge commit mentions a SHA rather than a branch

That's because I'd already committed the circle config to the branch, so I only 
merged it up to the correct commit.  I probably should've edited the message.

Thanks for the review, committed.

> netty-all vulnerability: CVE-2022-41881
> ---------------------------------------
>
>                 Key: CASSANDRA-18148
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-18148
>             Project: Cassandra
>          Issue Type: Bug
>          Components: Dependencies
>            Reporter: Brandon Williams
>            Assignee: Brandon Williams
>            Priority: Normal
>             Fix For: 3.0.29, 3.11.15, 4.0.8, 4.1.1, 4.2
>
>
> This is showing in the OWASP scan.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to