The TOMEE-2241 - Need to upgrade commons-lang3-3.5.jar to commons-lang3-3.8.jar to allows Struts users to fix CVE-2018-11776 in their app <https://issues.apache.org/jira/browse/TOMEE-2241> is already resolved, updating commons-lang3 dependency to 3.8.0.There is a bugfix version 3.8.1 of commons-lang3 available (which is used as dependency by commons-configuration2, for example).What is the best way to handle this if I want to have it updated?Create a new Issue? "Reopen" the issue?
-- Sent from: http://tomee-openejb.979440.n4.nabble.com/TomEE-Dev-f982480.html
