zookeeper-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Enrico Olivelli <eolive...@gmail.com>
Subject Re: owasp job just started flagging slf4j
Date Sat, 15 Dec 2018 22:29:45 GMT
Can we whitelist that jar in the meantime?

Enrico

Il sab 15 dic 2018, 01:28 Patrick Hunt <phunt@apache.org> ha scritto:

>
> https://builds.apache.org/view/S-Z/view/ZooKeeper/job/ZooKeeper-trunk-owasp/204/artifact/build/test/owasp/dependency-check-vulnerability.html
>
> https://nvd.nist.gov/vuln/detail/CVE-2018-8088
>
> We don't use EventData but should consider upgrading.
>
> https://issues.apache.org/jira/browse/ZOOKEEPER-3217
>
> Patrick
>
-- 


-- Enrico Olivelli

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message