diff options
| author |   Tschaen, Brendan <ctschaen@att.com> | 2019-10-11 11:05:48 -0400 |
|---|---|---|
| committer |   Gerrit Code Review <gerrit@onap.org> | 2019-10-11 15:05:48 +0000 |
| commit | 0bfab1135042371269bb4aa23599a98a9e8050f6 (patch) | |
| tree | 84012abe73ed721e933e7916ccabd9571d1a6861 /docs | |
| parent | 0aa3b7ac53025382ea9a491fd9533acbc3d20d5e (diff) | |
Update git submodules
* Update docs/submodules/music.git from branch 'elalto'
to da5ad5ecc57dd98654c96eb30965e09bbd22dc48
- El Alto Release Notes
Change-Id: I6703f52383d9901cb1e08b5ce92fb6e66b454cfa
Issue-ID: MUSIC-496
Signed-off-by: Tschaen, Brendan <ctschaen@att.com>
- Jackson Faster-xml vulnerability.
CVE-2019-14439 Information Disclosure Vulnerability
FasterXML Jackson-databind is prone to an information-disclosure
vulnerability that occurs due to a polymorphic typing issue.
Specifically, this issue occurs when an externally exposed JSON endpoint
has default typing enabled and has logback jar in the classpath.
An attacker can exploit this issue to obtain sensitive information that
may aid in further attacks.
Issue-ID: MUSIC-504
Signed-off-by: Thomas Nelson (arthurdent3) <nelson24@att.com>
Signed-off-by: Thomas Nelson (arthurdent3) <nelson24@att.com>
Change-Id: I2c31986ff2d792d482f84406e96c47dbf652f32f
Diffstat (limited to 'docs')
| m--------- | docs/submodules/music.git | 0 |
1 files changed, 0 insertions, 0 deletions
diff --git a/docs/submodules/music.git b/docs/submodules/music.git -Subproject f96ce582847ffde86516d131fd3857023b8ae66 +Subproject da5ad5ecc57dd98654c96eb30965e09bbd22dc4 |