Re: CVE-2019-10071: Apache Tapestry vulnerability disclosure

2019-10-07 Thread Nourredine K.
Hello Thiago, Same question here. Does this CVE concern only Tapestry 5.4 ? What about 5.3 ? Regards, Nouredine Le ven. 13 sept. 2019 à 17:02, Thiago H. de Paula Figueiredo < thiag...@gmail.com> a écrit : > I'm afraid I've mad an error. It should have been CVE-2019-10071: New Issue > in Fix

Re: [CVE-2019-0195] Apache Tapestry vulnerability disclosure

2019-10-07 Thread Nourredine K.
Hello Thiago, Does this CVE concerns only Tapestry 5.4 ? What about 5.1, 5.2 and 5.3 ? I think we should create a dedicated jira ticket for each CVE to allow security dev track Tapestry CVE more easily. Regards, Nouredine Le ven. 13 sept. 2019 à 16:11, Thiago H. de Paula Figueiredo < thiag...@g