This is an automated email from the ASF dual-hosted git repository.

jbonofre pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/karaf.git


The following commit(s) were added to refs/heads/main by this push:
     new f426ad082f KARAF-7712 - Upgrade to Sling common johnzon 1.2.16 
(johnzon 1.2.21) to fix CVE-2023-33008
     new 3d272b0d0c This closes #1728
f426ad082f is described below

commit f426ad082fac73487612f0ec411ff7655b8d86ae
Author: Colm O hEigeartaigh <cohei...@apache.org>
AuthorDate: Thu Jul 27 07:43:08 2023 +0100

    KARAF-7712 - Upgrade to Sling common johnzon 1.2.16 (johnzon 1.2.21) to fix 
CVE-2023-33008
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index efd58d0f52..62f4ebd76f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -346,7 +346,7 @@
         <spring.security56.version>5.6.3_1</spring.security56.version>
         <spring.security57.version>5.7.3_1</spring.security57.version>
 
-        <sling.commons.johnzon.version>1.2.14</sling.commons.johnzon.version>
+        <sling.commons.johnzon.version>1.2.16</sling.commons.johnzon.version>
         <sshd.version>2.10.0</sshd.version>
         <struts.bundle.version>1.3.10_1</struts.bundle.version>
         <xbean.version>4.22</xbean.version>

Reply via email to