This is an automated email from the ASF dual-hosted git repository.
rzo1 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomee-site-generator.git
The following commit(s) were added to refs/heads/main by this push:
new c27c83b Make additional information more visible for TomEE 8.0.13
c27c83b is described below
commit c27c83bc3d45909ccbdb85d0e0880a8fe6b3d87b
Author: Richard Zowalla <[email protected]>
AuthorDate: Tue Oct 25 10:01:15 2022 +0200
Make additional information more visible for TomEE 8.0.13
---
src/main/jbake/content/8.0.13/release-notes.adoc | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/src/main/jbake/content/8.0.13/release-notes.adoc
b/src/main/jbake/content/8.0.13/release-notes.adoc
index b479145..a277676 100644
--- a/src/main/jbake/content/8.0.13/release-notes.adoc
+++ b/src/main/jbake/content/8.0.13/release-notes.adoc
@@ -77,8 +77,8 @@ Thank you to everyone who contributed to this release,
including all of our user
== Additional Information
-Please note:
+**Please note:**
-- (1) CVE-2022-42003 (jackson-databind): Users are only affected, if
`UNWRAP_SINGLE_VALUE_ARRAYS` is enabled. Mitigation is included in 2.14.0-rc1.
As per list discussion we are fine shipping an RC version.
+IMPORTANT: (1) CVE-2022-42003 (jackson-databind): Users are only affected, if
`UNWRAP_SINGLE_VALUE_ARRAYS` is enabled. Mitigation is included in 2.14.0-rc1.
As per list discussion we are fine shipping an RC version.
-- (2) CVE-2022-41853 (hsqldb): As v2.7.1 wasn't available at voting time,
TomEE sets "hsqldb.method_class_names" to an invalid value to mitigate the
vulnerability. Users can override the property as needed.
\ No newline at end of file
+IMPORTANT: (2) CVE-2022-41853 (hsqldb): As v2.7.1 wasn't available at voting
time, TomEE sets "hsqldb.method_class_names" to an invalid value to mitigate
the vulnerability. Users can override the property as needed.
\ No newline at end of file
