https://bugzilla.redhat.com/show_bug.cgi?id=2014356
--- Comment #4 from Jonathan Christison <jochrist(a)redhat.com> ---
Red Hat Jboss Fuse 6 ships some of the vulnerable artifacts as bundled
artifacts in ops4j pax web, however there is no use of these artifacts in Fuse
itself, the artifacts are also prevented from loading with a deny list in
karaf, for these reasons we believe the impact upon Fuse 6.3 is low.
The same also applies to Red Hat Fuse 7.
This vulnerability is out of security support scope for the following products:
* Red Hat JBoss Fuse 6
Please refer to
https://access.redhat.com/support/policy/updates/jboss_notes
for more details.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2014356