Skip to content

Bump org.apache.mina from 2.2.4 to 2.2.7#1203

Open
dafriz wants to merge 1 commit intoquickfix-j:QFJ_2_3_xfrom
dafriz:bump-mina
Open

Bump org.apache.mina from 2.2.4 to 2.2.7#1203
dafriz wants to merge 1 commit intoquickfix-j:QFJ_2_3_xfrom
dafriz:bump-mina

Conversation

@dafriz
Copy link
Copy Markdown

@dafriz dafriz commented May 3, 2026

Upgrading Mina to vesion that has fixed some CVEs.

@chrjohn chrjohn modified the milestone: QFJ 2.3.3 May 4, 2026
@chrjohn
Copy link
Copy Markdown
Member

chrjohn commented May 4, 2026

@dafriz thanks for the PR. We might do a 2.3.3 release, but I cannot commit on a timeline at the moment. Please also note that QFJ is not affected by this vulnerability since it does not use the affected IoBuffer#getObject() method.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants