[ 
https://issues.apache.org/jira/browse/QPID-8331?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16950138#comment-16950138
 ] 

Robert Godfrey commented on QPID-8331:
--------------------------------------

While it makes complete sense to upgrade Derby... my recollection is that there 
is no open network server port for Derby that is exposed - we run Derby purely 
as an embedded service, so I would think that even using the old version Qpid 
would not be vulnerable

> [Broker-J] Upgrade derby dependency
> -----------------------------------
>
>                 Key: QPID-8331
>                 URL: https://issues.apache.org/jira/browse/QPID-8331
>             Project: Qpid
>          Issue Type: Improvement
>          Components: Broker-J
>            Reporter: Alex Rudyy
>            Assignee: Alex Rudyy
>            Priority: Major
>             Fix For: qpid-java-broker-8.0.0
>
>
> Upgrade derby dependency to version 10.14.2.0



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to