This is an automated email from the ASF dual-hosted git repository.
rzo1 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomee.git
The following commit(s) were added to refs/heads/main by this push:
new e410c04b1b This workaround isn't needed with hsqldb 2.7.1
e410c04b1b is described below
commit e410c04b1b8735d36b8cf548d54d1e889588610c
Author: Richard Zowalla <[email protected]>
AuthorDate: Mon Oct 24 12:11:38 2022 +0200
This workaround isn't needed with hsqldb 2.7.1
Revert "TOMEE-4088 - Add workaround for CVE-2022-41853 by setting
hsqldb.method_class_names to an invalid value (if not specified)"
This reverts commit 7b899cdc5dc283e7247754f706183cac8ba89ada.
---
.../src/main/java/org/apache/openejb/loader/SystemInstance.java | 7 -------
1 file changed, 7 deletions(-)
diff --git
a/container/openejb-loader/src/main/java/org/apache/openejb/loader/SystemInstance.java
b/container/openejb-loader/src/main/java/org/apache/openejb/loader/SystemInstance.java
index 4f03303afb..f200a16d7f 100644
---
a/container/openejb-loader/src/main/java/org/apache/openejb/loader/SystemInstance.java
+++
b/container/openejb-loader/src/main/java/org/apache/openejb/loader/SystemInstance.java
@@ -145,13 +145,6 @@ public final class SystemInstance {
if (getProperty("hsqldb.reconfig_logging") == null) {
setProperty("hsqldb.reconfig_logging", "false", true);
}
-
- // TOMEE-4086
- // Prevent CVE-2022-41853 by setting hsqldb.method_class_names if it
isn't set.
- // See: https://github.com/advisories/GHSA-77xx-rxvh-q682
- if (getProperty("hsqldb.method_class_names") == null) {
- setProperty("hsqldb.method_class_names", "invalid", true);
- }
}
public <E> E fireEvent(final E event) {