On Wed, Mar 17, 2021 at 4:13 AM Moritz Mühlenhoff wrote:
> > Having identified the offending code the fix is a one line change on the
> > other hand. I plan to upload a fixed version of log4net in the coming
> days.
>
> What's the status of that upload? Patch is at
>
>
Am Mon, Jan 11, 2021 at 10:54:27AM +0800 schrieb Mirco Bauer:
> Thanks for your email and raised concern, Jeremy.
>
> Full accessibility in Smuxi has been a high priority for me for a long
> time.
>
> I looked into the vulnerability of the log4net library that Smuxi depends
> on. my assessment
Hi Mirco,
On Mon, Jan 11, 2021 at 10:54:27AM +0800, Mirco Bauer wrote:
> Thanks for your email and raised concern, Jeremy.
>
> Full accessibility in Smuxi has been a high priority for me for a long
> time.
>
> I looked into the vulnerability of the log4net library that Smuxi depends
> on. my
Thanks for your email and raised concern, Jeremy.
Full accessibility in Smuxi has been a high priority for me for a long
time.
I looked into the vulnerability of the log4net library that Smuxi depends
on. my assessment doesn't classify a XXE for local configuration file as
release critical. An
4 matches
Mail list logo
