Re: [D] CVE-2021-45046/GHSA-7rjr-3q55-vv33 backport to 2.3 .x is not reported on GHSA advisory [logging-log4j2]
ppkarwasz (via GitHub) <[email protected]>
| Newsgroups | gmane.comp.jakarta.log4j.devel |
|---|---|
| Message-ID | <ghd-D_kwDOAKJSSM4AoPmh-7774e31c-9d8a-4fec-9b3c-49ec2150070a__24105.8698900574$1786520246$gmane$org@gitbox.apache.org> |
GitHub user ppkarwasz added a comment to the discussion: CVE-2021-45046/GHSA-7rjr-3q55-vv33 backport to 2.3.x is not reported on GHSA advisory Hi @noren95, You can cite apache/logging-site#6 as the source of the data (it contains the commits that fixed each CVE), however the reason GitHub hasn't reviewed your PR yet is not that it need additional information, but that as far as I know the team has about 2 months of backlog reviewing CVEs. GitHub link: https://github.com/apache/logging-log4j2/discussions/4236#discussioncomment-17985777 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected]