[
https://issues.apache.org/jira/browse/TOMEE-4127?focusedWorklogId=833941&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-833941
]
ASF GitHub Bot logged work on TOMEE-4127:
-----------------------------------------
Author: ASF GitHub Bot
Created on: 15/Dec/22 19:04
Start Date: 15/Dec/22 19:04
Worklog Time Spent: 10m
Work Description: rzo1 opened a new pull request, #988:
URL: https://github.com/apache/tomee/pull/988
as the title says
Issue Time Tracking
-------------------
Worklog Id: (was: 833941)
Remaining Estimate: 0h
Time Spent: 10m
> CXF 3.5.5
> ---------
>
> Key: TOMEE-4127
> URL: https://issues.apache.org/jira/browse/TOMEE-4127
> Project: TomEE
> Issue Type: Dependency upgrade
> Components: TomEE Core Server
> Affects Versions: 9.0.0.RC1
> Reporter: Richard Zowalla
> Assignee: Richard Zowalla
> Priority: Major
> Time Spent: 10m
> Remaining Estimate: 0h
>
> December 13, 2022 - Apache CXF 3.5.5 and 3.4.10 released!
> The Apache CXF team is proud to announce the availability of our latest patch
> releases! Over 9 JIRA issues were fixed for 3.5.5 and 3.4.10. Two new CVEs
> were issued for vulnerabilities fixed in these releases:
> CVE-2022-46363: Apache CXF directory listing / code exfiltration
> CVE-2022-46364: Apache CXF SSRF Vulnerability
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
