[
https://issues.apache.org/jira/browse/AXIS2-5853?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16053184#comment-16053184
]
Hudson commented on AXIS2-5853:
-------------------------------
SUCCESS: Integrated in Jenkins build axis2-1.7 #122 (See
[https://builds.apache.org/job/axis2-1.7/122/])
AXIS2-5853: Merge r1799068 to the 1.7 branch. (veithen: rev 1799069)
* (edit) axis2
* (edit) axis2/pom.xml
> Update commons fileupload to 1.3.3: Fixes CVE-2016-1000031
> ----------------------------------------------------------
>
> Key: AXIS2-5853
> URL: https://issues.apache.org/jira/browse/AXIS2-5853
> Project: Axis2
> Issue Type: Bug
> Components: kernel
> Affects Versions: 1.7.5
> Reporter: Mark Symons
>
> {{org.apache.axis2:axis2-kernel}} v1.7.5 has a
> {{commons-fileupload:commons-fileupload}} v1.3.1 compile dependency
> Update {{commons-fileupload}} to v1.3.3, which addresses CVE-2016-1000031
> (CVE CVSS 3.0: 9.8)
> The threat was addressed in FILEUPLOAD-279
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org
For additional commands, e-mail: java-dev-h...@axis.apache.org
