From 875df6cde775be86269df1dc0860596cc261f645 Mon Sep 17 00:00:00 2001 From: Jakub Date: Tue, 6 Oct 2026 14:36:06 +0200 Subject: [PATCH] OPSC-18029 Bump version to 2.7.0.17 to resolve CVE-2016-4000 scanner false positive The fix for CVE-2016-4000 (readResolve() in PyFunction blocking deserialization) has been present in ripcord-master since the branch was forked from upstream (commit 4c337213b). However, vulnerability scanners flag any version < 2.7.4 by version string alone. Bump version 2.7.0.16 -> 2.7.0.17 so the published jar reflects that this fix is intentionally included in this DataStax fork build. Ref: https://datastax.jira.com/browse/OPSC-18029 CVE: https://nvd.nist.gov/vuln/detail/CVE-2016-4000 --- build.xml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/build.xml b/build.xml index 15344f718..a628677a8 100644 --- a/build.xml +++ b/build.xml @@ -84,8 +84,8 @@ oracle.jar=C:/workspace/HEAD/for_development/bisdevsrv28/jboss/server/infra/lib/ - - + +