axis-java-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andreas Veithen (JIRA)" <j...@apache.org>
Subject [jira] [Resolved] (AXIS2-5945) CVE-2014-0107 in xalan
Date Sat, 05 Jan 2019 13:33:00 GMT

     [ https://issues.apache.org/jira/browse/AXIS2-5945?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Andreas Veithen resolved AXIS2-5945.
------------------------------------
       Resolution: Fixed
    Fix Version/s: 1.7.10

> CVE-2014-0107 in xalan
> ----------------------
>
>                 Key: AXIS2-5945
>                 URL: https://issues.apache.org/jira/browse/AXIS2-5945
>             Project: Axis2
>          Issue Type: Bug
>          Components: deployment
>    Affects Versions: 1.7.9
>            Reporter: Ranjit Vadakkan
>            Priority: Major
>             Fix For: 1.7.10
>
>
> BlackDuck is flagging Axis2's transitive dependency to xalan 2.7.0 as a major vulnerability.
See [https://nvd.nist.gov/vuln/detail/CVE-2014-0107] 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org


Mime
View raw message