https://bugzilla.redhat.com/show_bug.cgi?id=1203762
Jason Shepherd <jshepherd(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |jshepherd(a)redhat.com
--- Comment #5 from Jason Shepherd <jshepherd(a)redhat.com> ---
For JBoss Fuse, Apache Batik is used by the camel-fop component to render
messages into SVG Image+XML. See:
https://git-wip-us.apache.org/repos/asf?p=camel.git;a=blob;f=components/c...
The vulnerability fixed an issue with the way SVG parses XML, not with the way
it produces it. Therefore the issue doesn't effect JBoss Fuse 6.2.0. Add
jboss/fuse=notaffected
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=i1Cr8wFihz&a=cc_unsubscribe
_______________________________________________
java-sig-commits mailing list
java-sig-commits(a)lists.fedoraproject.org
http://lists.fedoraproject.org/postorius/java-sig-commits@lists.fedorapro...