This is an automated email from the ASF dual-hosted git repository.
danhaywood pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/isis.git
The following commit(s) were added to refs/heads/master by this push:
new d39806680b fixes CVE ref for m8
d39806680b is described below
commit d39806680b102d7fe9ce2c34cf34e51afb86f5b9
Author: Dan Haywood <[email protected]>
AuthorDate: Tue Oct 18 15:17:41 2022 +0100
fixes CVE ref for m8
---
.../relnotes/modules/ROOT/pages/2022/2.0.0-M8/relnotes.adoc | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git
a/antora/components/relnotes/modules/ROOT/pages/2022/2.0.0-M8/relnotes.adoc
b/antora/components/relnotes/modules/ROOT/pages/2022/2.0.0-M8/relnotes.adoc
index 578397547b..19ad8900d7 100644
--- a/antora/components/relnotes/modules/ROOT/pages/2022/2.0.0-M8/relnotes.adoc
+++ b/antora/components/relnotes/modules/ROOT/pages/2022/2.0.0-M8/relnotes.adoc
@@ -33,7 +33,7 @@ to allow pluggable management of identifiers in
bookmarks/URLs etc
* Support for Java Module System (`module.info.java`)
(link:https://issues.apache.org/jira/browse/ISIS-3207[ISIS-3207])
-This release also fixes the security vulnerability: CVE-2022-42466, fixed by
link:https://issues.apache.org/jira/browse/ISIS-3128[ISIS-3128]
+This release also fixes the security vulnerability: CVE-2022-42467, fixed by
link:https://issues.apache.org/jira/browse/ISIS-3128[ISIS-3128]
@@ -154,7 +154,7 @@ This release also fixes the security vulnerability:
CVE-2022-42466, fixed by lin
== Security Fixes
-* link:https://issues.apache.org/jira/browse/ISIS-3128[ISIS-3128] -
CVE-2022-42466 [Security] h2 console potentially vulnerable to code execution
+* link:https://issues.apache.org/jira/browse/ISIS-3128[ISIS-3128] -
CVE-2022-42467 [Security] h2 console potentially vulnerable to code execution
* link:https://issues.apache.org/jira/browse/ISIS-3077[ISIS-3077] -
[Vulnerability] Scalar Value Output Rendering is not escaped. (XSS
Vulnarability)
* link:https://issues.apache.org/jira/browse/ISIS-2977[ISIS-2977] -
[Vulnerability] jdom dependency has XXE vulnerability
