[ https://issues.apache.org/jira/browse/ROCKETMQ-143?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15938058#comment-15938058 ]
ASF subversion and git services commented on ROCKETMQ-143: ---------------------------------------------------------- Commit 3fe7535bc27fa21b2bc945b8bda273f29b31c131 in incubator-rocketmq's branch refs/heads/develop from [~Yukon] [ https://git-wip-us.apache.org/repos/asf?p=incubator-rocketmq.git;h=3fe7535 ] [ROCKETMQ-143][HOTFIX] Update fastjson to 1.2.29 > Update fastjson from 1.2.12 to 1.2.28 > ------------------------------------- > > Key: ROCKETMQ-143 > URL: https://issues.apache.org/jira/browse/ROCKETMQ-143 > Project: Apache RocketMQ > Issue Type: Bug > Components: build > Affects Versions: 4.0.0-incubating > Reporter: yukon > Assignee: yukon > Fix For: 4.1.0-incubating > > > FastJson has a high-risk security hole before 1.2.24, update to 1.2.28 is > recommended, more details please refer to [1]. > [1]. https://github.com/alibaba/fastjson/wiki/security_update_20170315 -- This message was sent by Atlassian JIRA (v6.3.15#6346)