A new ticket would be great. If you'd like to have a go a the patch too, that would be most welcome too!
Jon On Thu, Nov 22, 2018 at 12:58 PM Frankie <kamin.feuer.2...@gmx.de> wrote: > The TOMEE-2241 - Need to upgrade commons-lang3-3.5.jar to > commons-lang3-3.8.jar to allows Struts users to fix CVE-2018-11776 in their > app <https://issues.apache.org/jira/browse/TOMEE-2241> is already > resolved, updating commons-lang3 dependency to 3.8.0.There is a bugfix > version 3.8.1 of commons-lang3 available (which is used as dependency by > commons-configuration2, for example).What is the best way to handle this if > I want to have it updated?Create a new Issue? "Reopen" the issue? > > > > -- > Sent from: > http://tomee-openejb.979440.n4.nabble.com/TomEE-Dev-f982480.html
