[jira] [Updated] (SLING-12118) Update Batik XML utility library to version 1.17
[ https://issues.apache.org/jira/browse/SLING-12118?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robert Munteanu updated SLING-12118: Fix Version/s: XSS Protection API 2.3.12 (was: XSS Protection API 2.3.10) > Update Batik XML utility library to version 1.17 > > > Key: SLING-12118 > URL: https://issues.apache.org/jira/browse/SLING-12118 > Project: Sling > Issue Type: Bug > Components: XSS Protection API >Reporter: Tatyana Vogel >Assignee: Tatyana Vogel >Priority: Critical > Fix For: XSS Protection API 2.3.12 > > > The sling XSS library uses a vulnerable Batik XML utility library version. > Upgrade to a vulnerability-free version of the embedded library is needed. > [CVE-2022-44729|https://www.cvedetails.com/cve/CVE-2022-44729/] -- This message was sent by Atlassian Jira (v8.20.10#820010)
[jira] [Updated] (SLING-12118) Update Batik XML utility library to version 1.17
[ https://issues.apache.org/jira/browse/SLING-12118?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robert Munteanu updated SLING-12118: Fix Version/s: XSS Protection API 2.3.10 > Update Batik XML utility library to version 1.17 > > > Key: SLING-12118 > URL: https://issues.apache.org/jira/browse/SLING-12118 > Project: Sling > Issue Type: Bug > Components: XSS Protection API >Reporter: Tatyana Vogel >Assignee: Tatyana Vogel >Priority: Critical > Fix For: XSS Protection API 2.3.10 > > > The sling XSS library uses a vulnerable Batik XML utility library version. > Upgrade to a vulnerability-free version of the embedded library is needed. > [CVE-2022-44729|https://www.cvedetails.com/cve/CVE-2022-44729/] -- This message was sent by Atlassian Jira (v8.20.10#820010)