[
https://issues.apache.org/jira/browse/GEODE-10687?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18133748#comment-18133748
]
ASF subversion and git services commented on GEODE-10687:
---------------------------------------------------------
Commit 68d758fa560f0b162505bd9b6a26b637c09848d6 in geode's branch
refs/heads/develop from Jinwoo Hwang
[ https://gitbox.apache.org/repos/asf?p=geode.git;h=68d758fa56 ]
GEODE-10687: Upgrade ASM to 9.11 (#8139)
> Upgrade org.ow2.asm:asm to 9.11
> -------------------------------
>
> Key: GEODE-10687
> URL: https://issues.apache.org/jira/browse/GEODE-10687
> Project: Geode
> Issue Type: Improvement
> Reporter: Jinwoo Hwang
> Assignee: Jinwoo Hwang
> Priority: Major
>
> org.ow2.asm:[email protected] CVE remediation.
> Only asm, asm-commons, and asm-tree are pinned, which matches what appears in
> the classpath fixture files. If Jetty or another transitive ever pulls in
> asm-analysis or asm-util, they would not be covered by this pin.
> (credit:@utafrali)
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
