Ok, just checked and seems we are good just upgrading the version this time so +1
Romain Manni-Bucau @rmannibucau <https://twitter.com/rmannibucau> | Blog <https://rmannibucau.metawerx.net/> | Old Blog <http://rmannibucau.wordpress.com> | Github <https://github.com/rmannibucau> | LinkedIn <https://www.linkedin.com/in/rmannibucau> | Book <https://www.packtpub.com/application-development/java-ee-8-high-performance> Le mer. 21 déc. 2022 à 14:15, Mark Struberg <strub...@yahoo.de.invalid> a écrit : > +1 it's easy to upgrade CXF but I'd like to get the CVE solved officially. > > LieGrue, > strub > > > Am 20.12.2022 um 23:35 schrieb Jean-Baptiste Onofré <j...@nanthrax.net>: > > > > I guess 3.5.5 which includes some CVE fixes. > > > > Regards > > JB > > > > Le mar. 20 déc. 2022 à 21:20, Romain Manni-Bucau <rmannibu...@gmail.com> > a > > écrit : > > > >> Hi Mark, > >> > >> Do you mean 4.0.0 ir 3.5.5? > >> Seems not done on master but we need to check deps chnages before > since we > >> must exclude most of them in general with cxf heterogeneous tree. > >> > >> Romain > >> > >> > >> > >> Le mar. 20 déc. 2022 à 21:10, Mark Struberg <strub...@yahoo.de.invalid> > a > >> écrit : > >> > >>> I'd like to roll the release for a new Meecrowave version tomorrow with > >> an > >>> updated CXF. > >>> > >>> You've got about 12h to stop me ;) > >>> > >>> txs and LieGrue, > >>> strub > >>> > >>> > >> > >
