Uploaded image for project: 'Qpid'
  1. Qpid
  2. QPID-8582

[Broker-J] Update dependencies with vulnerabilities

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Minor
    • Resolution: Implemented
    • qpid-java-broker-8.0.6
    • qpid-java-broker-9.0.0
    • Broker-J
    • None

    Description

      Several Broker-J dependencies suffer from vulnerabilities:

       

      Dependency Vulnerabilities
      JUnit 4.13 CVE-2020-15250
      jackson-databind 2.13.2 CVE-2020-36518
      netty-codec-http 4.1.51.Final  CVE-2021-37137, CVE-2021-37136
      httpclient 4.5.3 CVE-2020-15250

       

      They should be updated to the actual versions.

      Attachments

        Activity

          People

            Unassigned Unassigned
            daniel.kirilyuk Daniil Kirilyuk
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: