[JBoss JIRA] (TEIID-5823) CVE's in jboss-fuse/teiid
- First Post
- Replies
- Stats
-
Go to
- ----- 2025 -----
- January
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
[
https://issues.jboss.org/browse/TEIID-5823?page=com.atlassian.jira.plugin...
]
Steven Hawkins commented on TEIID-5823:
---------------------------------------
The lucene change is from 5.5.4 to 7.1.0. This is used by hibernate-search-engine under
infinispan. Even the latest version of that dependency uses 5.5.5. Upstream I'm
going to update our infinispan dependency, but otherwise remove the lucene change. The
expectation is that infinispan and/or hibernate will address this.
CVE's in jboss-fuse/teiid
-------------------------
Key: TEIID-5823
URL: https://issues.jboss.org/browse/TEIID-5823
Project: Teiid
Issue Type: Quality Risk
Components: Build/Kits
Affects Versions: 13.x, 12.3.1
Reporter: Van Halbert
Assignee: Van Halbert
Priority: Blocker
Fix For: 13.0, 7.5-12.3.1
*Branch/Tag*: 12.3.1.fuse-750011-redhat-00001
* *Severity*: {color:#f9423a}High{color}
1. apache commons collections
* Vulnerability ID: CVE-2015-6420
2. org.apache.lucene:lucene-queryparser - Remote Code Execution (RCE)
* Vulnerability ID: CVE-2017-12629
3. org.slf4j:slf4j-ext - Access Restriction Bypass
* Vulnerability ID: CVE-2018-8088
These changes will be committed to the teiid/teiid product branch 7.5-12.3.x and to
master.
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
1913
days inactive
1913
days old
0 comments
1 participants
tags (0)
participants (1)
-
Steven Hawkins (Jira)