Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

Bump org.apache.mina from 2.2.4 to 2.2.7#1203

Open
dafriz wants to merge 1 commit intoquickfix-j:QFJ_2_3_xquickfix-j/quickfixj:QFJ_2_3_xfrom
dafriz:bump-minadafriz/quickfixj:bump-minaCopy head branch name to clipboard
Open

Bump org.apache.mina from 2.2.4 to 2.2.7#1203
dafriz wants to merge 1 commit intoquickfix-j:QFJ_2_3_xquickfix-j/quickfixj:QFJ_2_3_xfrom
dafriz:bump-minadafriz/quickfixj:bump-minaCopy head branch name to clipboard

Conversation

@dafriz
Copy link
Copy Markdown

@dafriz dafriz commented May 3, 2026

Upgrading Mina to vesion that has fixed some CVEs.

@chrjohn chrjohn modified the milestone: QFJ 2.3.3 May 4, 2026
@chrjohn
Copy link
Copy Markdown
Member

chrjohn commented May 4, 2026

@dafriz thanks for the PR. We might do a 2.3.3 release, but I cannot commit on a timeline at the moment. Please also note that QFJ is not affected by this vulnerability since it does not use the affected IoBuffer#getObject() method.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

Morty Proxy This is a proxified and sanitized view of the page, visit original site.