Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NO-ISSUE: Bump xstream to version 1.4.21 #6148

Merged
merged 1 commit into from
Nov 14, 2024

Conversation

yesamer
Copy link
Contributor

@yesamer yesamer commented Nov 12, 2024

The current xstream 1.4.20 is affected by CVE-2024-47072.
Updating xstream to ´1.4.21´ resolves the CVE

@yesamer yesamer added the dependencies Pull requests that update a dependency file label Nov 12, 2024
@yesamer yesamer changed the title NO-ISSUE: Bump xstream to version ´1.4.21´ NO-ISSUE: Bump xstream to version 1.4.21 Nov 12, 2024
@baldimir baldimir merged commit d5e463e into apache:main Nov 14, 2024
12 checks passed
rgdoliveira pushed a commit to rgdoliveira/drools that referenced this pull request Nov 18, 2024
@porcelli
Copy link
Member

@yesamer @baldimir @gitgabrio missing updates on optaplanner and kogito-apps repos

@yesamer yesamer deleted the bump_xstream_1.4.21 branch November 18, 2024 20:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants