[
https://issues.apache.org/jira/browse/CURATOR-484?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16685744#comment-16685744
]
Cameron McKenzie commented on CURATOR-484:
------------------------------------------
Maybe I'm missing something, but looking at this security issue, it would
appear to be a server side only problem?
> CVE-2014-0085, CVE-2018-8012 known security vulnerabilities
> -----------------------------------------------------------
>
> Key: CURATOR-484
> URL: https://issues.apache.org/jira/browse/CURATOR-484
> Project: Apache Curator
> Issue Type: Improvement
> Reporter: Mujassim Sheikh
> Assignee: Jordan Zimmerman
> Priority: Major
>
> 1. Due to the dependency on apache zookeeper 3.5.3-beta, curator is
> vulnerable to CVE-2018-8012
> We should change it to use 3.5.4-beta as soon as possible.
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
