[
https://issues.apache.org/jira/browse/DAFFODIL-2611?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Dave Thompson closed DAFFODIL-2611.
-----------------------------------
Verified the specified commit (commit 5303d86fba8e9e1d3daa36fed405e507857fde1f)
is included in the latest pull from the daffodil repository.
Verified the log4j dependency in the project/Dependencies.scala file has been
updated to jdom2 version 2.0.6.1 which mitigates CVE-2021-33813.
> Update JDOM dependency to fix CVE-2021-33813
> --------------------------------------------
>
> Key: DAFFODIL-2611
> URL: https://issues.apache.org/jira/browse/DAFFODIL-2611
> Project: Daffodil
> Issue Type: Bug
> Components: General
> Affects Versions: 3.2.0
> Reporter: Mike Beckerle
> Assignee: John Interrante
> Priority: Critical
> Fix For: 3.2.1
>
>
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
