[
https://issues.apache.org/jira/browse/ARTEMIS-3347?focusedWorklogId=611357&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-611357
]
ASF GitHub Bot logged work on ARTEMIS-3347:
-------------------------------------------
Author: ASF GitHub Bot
Created on: 15/Jun/21 14:10
Start Date: 15/Jun/21 14:10
Worklog Time Spent: 10m
Work Description: asfgit merged pull request #3625:
URL: https://github.com/apache/activemq-artemis/pull/3625
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
Issue Time Tracking
-------------------
Worklog Id: (was: 611357)
Time Spent: 20m (was: 10m)
> update commons-io
> -----------------
>
> Key: ARTEMIS-3347
> URL: https://issues.apache.org/jira/browse/ARTEMIS-3347
> Project: ActiveMQ Artemis
> Issue Type: Dependency upgrade
> Components: Broker, Tests, Web Console
> Reporter: Robbie Gemmell
> Priority: Major
> Fix For: 2.18.0
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> The codebase uses various versions of commons-io which are susceptible to a
> path traversal CVE
> [https://nvd.nist.gov/vuln/detail/CVE-2021-29425|https://nvd.nist.gov/vuln/detail/CVE-2021-29425.],
> which affects < 2.7.0
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
