This is an automated email from the ASF dual-hosted git repository.

rzo1 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomee.git


The following commit(s) were added to refs/heads/main by this push:
     new e410c04b1b This workaround isn't needed with hsqldb 2.7.1
e410c04b1b is described below

commit e410c04b1b8735d36b8cf548d54d1e889588610c
Author: Richard Zowalla <[email protected]>
AuthorDate: Mon Oct 24 12:11:38 2022 +0200

    This workaround isn't needed with hsqldb 2.7.1
    
    Revert "TOMEE-4088 - Add workaround for CVE-2022-41853 by setting 
hsqldb.method_class_names to an invalid value (if not specified)"
    
    This reverts commit 7b899cdc5dc283e7247754f706183cac8ba89ada.
---
 .../src/main/java/org/apache/openejb/loader/SystemInstance.java    | 7 -------
 1 file changed, 7 deletions(-)

diff --git 
a/container/openejb-loader/src/main/java/org/apache/openejb/loader/SystemInstance.java
 
b/container/openejb-loader/src/main/java/org/apache/openejb/loader/SystemInstance.java
index 4f03303afb..f200a16d7f 100644
--- 
a/container/openejb-loader/src/main/java/org/apache/openejb/loader/SystemInstance.java
+++ 
b/container/openejb-loader/src/main/java/org/apache/openejb/loader/SystemInstance.java
@@ -145,13 +145,6 @@ public final class SystemInstance {
         if (getProperty("hsqldb.reconfig_logging") == null) {
             setProperty("hsqldb.reconfig_logging", "false", true);
         }
-
-        // TOMEE-4086
-        // Prevent CVE-2022-41853 by setting hsqldb.method_class_names if it 
isn't set.
-        // See: https://github.com/advisories/GHSA-77xx-rxvh-q682
-        if (getProperty("hsqldb.method_class_names") == null) {
-            setProperty("hsqldb.method_class_names", "invalid", true);
-        }
     }
 
     public <E> E fireEvent(final E event) {

Reply via email to