diff --git a/velocity-1.7-CVE-2020-13936.patch b/velocity-1.7-CVE-2020-13936.patch index 5197cd8..88a9b71 100644 --- a/velocity-1.7-CVE-2020-13936.patch +++ b/velocity-1.7-CVE-2020-13936.patch @@ -1,5 +1,5 @@ ---- velocity-1.7/src/java/org/apache/velocity/runtime/defaults/velocity.properties 2010-11-19 21:16:27.000000000 +0100 -+++ velocity-1.7/src/java/org/apache/velocity/runtime/defaults/velocity.properties 2021-03-12 09:12:50.474890036 +0100 +--- a/src/java/org/apache/velocity/runtime/defaults/velocity.properties ++++ b/src/java/org/apache/velocity/runtime/defaults/velocity.properties @@ -245,15 +245,15 @@ # accessed. # ---------------------------------------------------------------------------- @@ -38,8 +38,8 @@ + + ---- velocity-1.7/src/java/org/apache/velocity/util/introspection/SecureIntrospectorImpl.java 2010-11-19 21:16:28.000000000 +0100 -+++ velocity-1.7/src/java/org/apache/velocity/util/introspection/SecureIntrospectorImpl.java 2021-03-12 09:08:35.169371137 +0100 +--- a/src/java/org/apache/velocity/util/introspection/SecureIntrospectorImpl.java ++++ b/src/java/org/apache/velocity/util/introspection/SecureIntrospectorImpl.java @@ -122,6 +122,15 @@ } @@ -49,7 +49,7 @@ + if (ClassLoader.class.isAssignableFrom(clazz) || + Thread.class.isAssignableFrom(clazz)) + { -+ return false; ++ return false; + } + + /**