Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(dependencies): update resteasy to remove CVE #1123

Open
wants to merge 3 commits into
base: master
Choose a base branch
from

Commits on Apr 21, 2022

  1. fix(dependencies): update resteasy to remove CVE

    An old version of resteasy is resolved transitively through org.pacesys:openstack4j in front50-swift. Updating this removes CVE-2020-1695.
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1695
    
    At Armory, we have been running this config for over a year, so this is a pretty safe change. We are just moving our own overrides to open source to fix CVE's for everyone.
    |    |    |    \--- org.pacesys:openstack4j:3.2.0
    |    |    |         +--- org.pacesys.openstack4j.connectors:openstack4j-resteasy:3.2.0
    |    |    |         |    +--- org.jboss.resteasy:resteasy-client:3.1.4.Final
    |    |    |         |    |    +--- org.jboss.resteasy:resteasy-jaxrs:3.1.4.Final -> 3.12.1.Final
    claymccoy committed Apr 21, 2022
    Configuration menu
    Copy the full SHA
    732a2dc View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    8c0d4df View commit details
    Browse the repository at this point in the history

Commits on May 2, 2022

  1. Configuration menu
    Copy the full SHA
    e6ce4fb View commit details
    Browse the repository at this point in the history