Upgradend Quartz Scheduler Version to from 2.2.3 to 2.3.2 - CVE-2019-13990 - CWE-611 #3204
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Coduz
added
Security
lorthirk
approved these changes
Jan 20, 2021
Codecov Report
@@ Coverage Diff @@
## develop #3204 +/- ##
=============================================
+ Coverage 55.30% 55.35% +0.05%
- Complexity 2502 2504 +2
=============================================
Files 1273 1273
Lines 26996 26996
Branches 2340 2340
=============================================
+ Hits 14929 14943 +14
+ Misses 11177 11162 -15
- Partials 890 891 +1
|
Coduz
force-pushed
the
chng-bumpQuartzVersionTo2.3.2
branch
3 times, most recently
from
36a57ec to
f945eac
Compare
lorthirk
approved these changes
Jan 28, 2021
Coduz
force-pushed
the
chng-bumpQuartzVersionTo2.3.2
branch
from
f945eac to
c35615a
Compare
Coduz
added
CQ approved
|
CQs Approved |
Coduz
force-pushed
the
chng-bumpQuartzVersionTo2.3.2
branch
from
c35615a to
1768c58
Compare
Signed-off-by: Alberto Codutti <alberto.codutti@eurotech.com>
Coduz
force-pushed
the
chng-bumpQuartzVersionTo2.3.2
branch
from
1768c58 to
65d57e4
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR bumps the version of Quartz Scheduler to 2.3.2
Related Issue
None
Description of the solution adopted
Bumped to the last version available.
https://mvnrepository.com/artifact/org.quartz-scheduler/quartz/2.3.2
CQ for Quartz: 22979
Following transitive dependencies have been excluded since we are using EclipseLink connection pooling.
Transient dependency on
slf4j-apiis already used by Kapua, and we recently upgraded it to the latest available.Screenshots
None
Any side note on the changes made
None