On Tue, 8 Oct 2019 at 11:23, VERMEULEN Olivier <[email protected]> wrote: > > +1 > > Launched the Murex validation pipeline which includes: > - basic sends and receives > - basic routing and filtering > - JDBC message and config stores > - message recovery > - HTTP management and statistics > - TTL, max queue size and max message size > - SSL and SASL > > Note that we've also added a performance test (that uses the JDBC message > store) and a legal/security check. > For information the security check raised that Jackson 2.9.9.3 has 2 known > major security issues and should be upgraded. > > Olivier >
Are you sure you checked the 7.1.5 RC, since it doesn't use 2.9.9.3 as it was already updated: https://gitbox.apache.org/repos/asf?p=qpid-broker-j.git;a=commit;h=8fc4df81cd50a86f8bffaf4230689d0c2a34bc75 Running mvn dependency:tree on the src tar only looks to show 2.9.10 being used as expected based on that. Robbie --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
