Re: [m2e-dev] CVE-2020-10683

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]

Re: [m2e-dev] CVE-2020-10683

From: Mickael Istria <mistria@xxxxxxxxxx>
Date: Wed, 3 Jun 2020 23:29:06 +0200
Delivered-to: m2e-dev@xxxxxxxxxxx
List-archive: <https://www.eclipse.org/mailman/private/m2e-dev>
List-help: <mailto:m2e-dev-request@eclipse.org?subject=help>
List-subscribe: <https://www.eclipse.org/mailman/listinfo/m2e-dev>, <mailto:m2e-dev-request@eclipse.org?subject=subscribe>
List-unsubscribe: <https://www.eclipse.org/mailman/options/m2e-dev>, <mailto:m2e-dev-request@eclipse.org?subject=unsubscribe>

Hi Tony,

There is still time (about a week), please open a bug about it to m2e with more details about the source of this CVE and where the faulty dom4j lib comes from, and consider submitting a patch for this.

Cheers,

Follow-Ups:
- Re: [m2e-dev] CVE-2020-10683
  - From: Homer, Tony

References:
- [m2e-dev] CVE-2020-10683
  - From: Homer, Tony

Prev by Date: Re: [m2e-dev] 1.15 or 1.16 for 2020-06?
Next by Date: Re: [m2e-dev] CVE-2020-10683
Previous by thread: [m2e-dev] CVE-2020-10683
Next by thread: Re: [m2e-dev] CVE-2020-10683
Index(es):
- Date
- Thread

Breadcrumbs