1 of 1 people found this helpful
JBoss Fuse 6.1 uses Spring 3.2.8 and CXF 2.7.10 - which I think has a fix for those.
thanks for the response, it wasn't clear to me if those versions were covered.
The Red Hat products dont get signed off for release unless the Red Hat security has accepted the release. And they have been outstanding in reporting issues from 3rd party which we must have fixed for fuse 6.1. So they have kept us on our toes to ensure we ship the product as secure as possible.