[
https://issues.apache.org/jira/browse/KARAF-7625?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17649410#comment-17649410
]
ASF subversion and git services commented on KARAF-7625:
--------------------------------------------------------
Commit 7d37ae4a4e284457266b5a6738b4315f7296ea80 in karaf's branch
refs/heads/karaf-4.3.x from Jean-Baptiste Onofré
[ https://gitbox.apache.org/repos/asf?p=karaf.git;h=7d37ae4a4e ]
[KARAF-7625] Upgrade to CXF 3.5.5
(cherry picked from commit 4864e8a7b9a90a7e21c9a8882f4667cea2fde3a1)
> Upgrade to CXF 3.5.5
> --------------------
>
> Key: KARAF-7625
> URL: https://issues.apache.org/jira/browse/KARAF-7625
> Project: Karaf
> Issue Type: Dependency upgrade
> Components: karaf
> Reporter: Andre Schlegel-Tylla
> Assignee: Jean-Baptiste Onofré
> Priority: Major
>
> In CXF are two new security vulnerabilities reportet
> ([https://nvd.nist.gov/vuln/detail/CVE-2022-46363,]
> [https://nvd.nist.gov/vuln/detail/CVE-2022-46364)|https://nvd.nist.gov/vuln/detail/CVE-2022-46364]
> So CXF should be updated to Version 3.5.5.
> FYI [~jbonofre]
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
