Hi You should be able to override the Spring version using the overrides feature (etc/overrides.properties). I'll write more details in the evening. I'll open an issue in Karaf with proposal to upgrade to Spring 3.2.17.
Regards Krzysztof On 13.07.2016 16:45, RayG wrote: > Hi > > After reviewing the currently released versions of ServiceMix (5.4.3 - > 7.0.0M2), it appears they all use Spring 3.2.14. There seems to be a > security issue (http://pivotal.io/security/cve-2015-5211) on a number of > framework versions including 3.2.14, so could anyone tell me if a) there is > a version of ServiceMix which uses 3.2.15+, b) whether it is safe/possible > to patch 3.2.15 into one of the current ServiceMix offerings, or c) there is > another alternative. > > Many thanks for your help. > R. > > > > > -- > View this message in context: > http://servicemix.396122.n5.nabble.com/ServiceMix-and-Spring-version-tp5723869.html > Sent from the ServiceMix - Dev mailing list archive at Nabble.com. -- Krzysztof Sobkowiak JEE & OSS Architect, Integration Architect Apache Software Foundation Member (http://apache.org/) Apache ServiceMix Committer & PMC Member (http://servicemix.apache.org/) Senior Solution Architect @ Capgemini SSC (http://www.capgeminisoftware.pl/)
