Details
-
Bug
-
Resolution: Done
-
Critical
-
fuse-7.8-GA
-
None
-
False
-
False
-
%
-
Todo
-
Undefined
Description
The following CVE affect the Netty jar included in the Narayana OSGI bundle:
- https://access.redhat.com/security/cve/CVE-2020-11612
- https://access.redhat.com/security/cve/CVE-2019-20445
- https://access.redhat.com/security/cve/CVE-2019-20444
- https://access.redhat.com/security/cve/CVE-2019-16869
The best would be to use only OSGI dependencies.
