[
https://issues.apache.org/jira/browse/QPID-8331?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16950138#comment-16950138
]
Robert Godfrey commented on QPID-8331:
--------------------------------------
While it makes complete sense to upgrade Derby... my recollection is that there
is no open network server port for Derby that is exposed - we run Derby purely
as an embedded service, so I would think that even using the old version Qpid
would not be vulnerable
> [Broker-J] Upgrade derby dependency
> -----------------------------------
>
> Key: QPID-8331
> URL: https://issues.apache.org/jira/browse/QPID-8331
> Project: Qpid
> Issue Type: Improvement
> Components: Broker-J
> Reporter: Alex Rudyy
> Assignee: Alex Rudyy
> Priority: Major
> Fix For: qpid-java-broker-8.0.0
>
>
> Upgrade derby dependency to version 10.14.2.0
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]