Sign In
Sign Up
Sign In
Sign Up
Manage this list
2024
May
April
March
February
January
2023
December
November
October
September
August
July
June
May
April
March
February
January
2022
December
November
October
September
August
July
June
May
April
March
February
January
2021
December
November
October
September
August
July
June
May
April
March
February
January
2020
December
November
October
September
August
July
June
May
April
March
February
January
2019
December
November
October
September
August
July
June
May
April
March
February
January
2018
December
November
October
September
August
July
June
May
April
March
February
January
2017
December
November
October
September
August
July
June
May
April
March
February
January
2016
December
November
October
September
August
July
June
May
April
March
February
January
2015
December
November
October
September
August
July
June
May
April
March
February
January
2014
December
November
October
September
August
July
June
May
April
March
February
January
2013
December
November
October
September
August
July
June
May
April
March
February
January
2012
December
November
October
September
August
July
June
May
April
March
February
January
2011
December
November
October
September
August
July
June
May
April
March
February
January
2010
December
List overview
Download
thread
[java-sig-commits] [Bug 1937440] CVE-2020-13936 velocity: arbitrary code execution when attacker is able to modify templates
bugzilla@redhat.com
Wednesday, 10 March 2021
Wed, 10 Mar '21
8:59 p.m.
https://bugzilla.redhat.com/show_bug.cgi?id=1937440
--- Comment #6 from Mark Cooper <mcooper(a)redhat.com> --- Thanks to @jpadman for helping, looks like there's a range of commits from July/August which we believe to be the fixes: -
https://github.com/apache/velocity-engine/commit/1ba60771d23dae7e6b3138ae...
-
https://github.com/apache/velocity-engine/commit/15909056fe51f5d39d49e101...
-
https://github.com/apache/velocity-engine/commit/3f5d477bb4f4397bed2d2926...
-- You are receiving this mail because: You are on the CC list for the bug.
0
/
0
Reply
Back to the thread
Back to the list