Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bumped version of Snake Yaml from 1.15 to 1.28 - CVE-2017-18640 - CWE-189 #3275

Merged
merged 1 commit into from
Mar 17, 2021

Conversation

Coduz
Copy link
Contributor

@Coduz Coduz commented Mar 16, 2021

This PR bumps the version of Snake YAML from 1.15 to 1.28.

Related Issue
None

Description of the solution adopted
Bumped the version.

CQ filed: 23168

Screenshots
None

Any side note on the changes made
None

Signed-off-by: Alberto Codutti <alberto.codutti@eurotech.com>
@Coduz Coduz added Security This issue/PR has some security critical aspect and should be issued as soon as possible Dependencies PR that updates dependencies. Be on the edge! labels Mar 16, 2021
@Coduz Coduz requested a review from lorthirk March 16, 2021 09:14
@Coduz Coduz added the CQ pending This PR needs a CQ to be approved from Eclipse before merging. label Mar 16, 2021
@codecov
Copy link

codecov bot commented Mar 16, 2021

Codecov Report

Merging #3275 (e51fbc6) into develop (3eefc99) will decrease coverage by 26.03%.
The diff coverage is n/a.

Impacted file tree graph

@@              Coverage Diff               @@
##             develop    #3275       +/-   ##
==============================================
- Coverage      51.47%   25.43%   -26.04%     
+ Complexity       764      657      -107     
==============================================
  Files           1467     1467               
  Lines          29943    29943               
  Branches        2504     2504               
==============================================
- Hits           15414     7617     -7797     
- Misses         13657    21724     +8067     
+ Partials         872      602      -270     
Impacted Files Coverage Δ Complexity Δ
...rc/main/java/org/eclipse/kapua/KapuaException.java 0.00% <0.00%> (-100.00%) 0.00% <0.00%> (ø%)
...c/main/java/org/eclipse/kapua/KapuaErrorCodes.java 0.00% <0.00%> (-100.00%) 0.00% <0.00%> (ø%)
...in/java/org/eclipse/kapua/broker/BrokerDomain.java 0.00% <0.00%> (-100.00%) 0.00% <0.00%> (ø%)
...ain/java/org/eclipse/kapua/event/ServiceEvent.java 0.00% <0.00%> (-100.00%) 0.00% <0.00%> (ø%)
...n/java/org/eclipse/kapua/broker/BrokerDomains.java 0.00% <0.00%> (-100.00%) 0.00% <0.00%> (ø%)
...va/org/eclipse/kapua/commons/util/SystemUtils.java 0.00% <0.00%> (-100.00%) 0.00% <0.00%> (ø%)
...n/java/org/eclipse/kapua/model/domain/Actions.java 0.00% <0.00%> (-100.00%) 0.00% <0.00%> (ø%)
.../java/org/eclipse/kapua/message/KapuaPosition.java 0.00% <0.00%> (-100.00%) 0.00% <0.00%> (ø%)
.../java/org/eclipse/kapua/KapuaRuntimeException.java 0.00% <0.00%> (-100.00%) 0.00% <0.00%> (ø%)
.../java/org/eclipse/kapua/model/query/SortOrder.java 0.00% <0.00%> (-100.00%) 0.00% <0.00%> (ø%)
... and 548 more

@lorthirk lorthirk merged commit 7f08c8d into eclipse:develop Mar 17, 2021
@Coduz Coduz deleted the chng-bumpSnakeYamlTo1.28 branch March 17, 2021 10:34
@Coduz Coduz added CQ approved The PR has passed CQ approvation and removed CQ pending This PR needs a CQ to be approved from Eclipse before merging. labels Mar 22, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
CQ approved The PR has passed CQ approvation Dependencies PR that updates dependencies. Be on the edge! Security This issue/PR has some security critical aspect and should be issued as soon as possible
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants