[
https://issues.apache.org/jira/browse/SM-5854?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Geoff Denning updated SM-5854:
------------------------------
Description:
The current 6.4.6 version (see SM-5850) has one vulnerability:
[CVE-2025-41248|https://nvd.nist.gov/vuln/detail/CVE-2025-41248] (CVSS3 score
7.5) raised on 2025-09-16.
* Upgrade to 6.4.10.
was:
The current 6.4.6 version (see SM-5850) has one vulnerability:
CVE-2025-41248 (CVSS3 score 7.5) raised on 2025-09-16.
* Upgrade to 6.4.10.
> Create OSGi bundles for Spring Security 6.4.10
> ----------------------------------------------
>
> Key: SM-5854
> URL: https://issues.apache.org/jira/browse/SM-5854
> Project: ServiceMix
> Issue Type: Dependency upgrade
> Components: bundles
> Reporter: Geoff Denning
> Priority: Minor
>
> The current 6.4.6 version (see SM-5850) has one vulnerability:
> [CVE-2025-41248|https://nvd.nist.gov/vuln/detail/CVE-2025-41248] (CVSS3 score
> 7.5) raised on 2025-09-16.
> * Upgrade to 6.4.10.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
