[
https://issues.apache.org/jira/browse/AMQ-7436?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
pcwang closed AMQ-7436.
-----------------------
Resolution: Duplicate
> Fix CVE issues for log4j, jackson-databind and jolokia-core
> -----------------------------------------------------------
>
> Key: AMQ-7436
> URL: https://issues.apache.org/jira/browse/AMQ-7436
> Project: ActiveMQ
> Issue Type: Bug
> Affects Versions: 5.15.11
> Reporter: pcwang
> Priority: Major
>
> Due to several security issues of jackson
> databind(CVE-2020-8840,CVE-2019-20330 ),log4j(CVE-2019-17571) and
> jolokia-core-1.6.0.jar（ CVE-2018-10899 ), here propose to upgrade jackson
> version 2.10.1, log4j 2.13.0 and jolokia-core-1.6.2.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
