Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Upgraded Apache Commons Compress from 1.18 to 1.22 - CVE-2021-35515 CVE-2021-35516 CVE-2021-35517 CVE-2021-36090 #3657

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Nov 8, 2022
Merged

Upgraded Apache Commons Compress from 1.18 to 1.22 - CVE-2021-35515 CVE-2021-35516 CVE-2021-35517 CVE-2021-36090 #3657

merged 1 commit into from
Nov 8, 2022

Conversation

@Coduz
Copy link
Contributor

@Coduz Coduz commented Nov 7, 2022

This PR upgrades the version of Apache Commons Compress from 1.18 to 1.22 solving following CVEs:

Related Issue
None

Description of the solution adopted
Upgraded dependency version

Screenshots
None

Any side note on the changes made
None

@Coduz Coduz added the Dependencies PR that updates dependencies. Be on the edge! label Nov 7, 2022
@Coduz Coduz requested a review from stefanomorson November 7, 2022 15:52
@codecov
Copy link

codecov bot commented Nov 7, 2022 •
edited
Loading

Codecov Report

Merging #3657 (a178ce0) into develop (8e01b9d) will decrease coverage by 21.02%.
The diff coverage is 50.00%.

❗ Current head a178ce0 differs from pull request most recent head 9dc8aa4. Consider uploading reports for the commit 9dc8aa4 to get more accurate results

Impacted file tree graph

@@              Coverage Diff               @@
##             develop    #3657       +/-   ##
==============================================
- Coverage      50.13%   29.10%   -21.03%     
+ Complexity       259      147      -112     
==============================================
  Files           1669     1669               
  Lines          32011    32015        +4     
  Branches        2634     2634               
==============================================
- Hits           16048     9318     -6730     
- Misses         15028    21885     +6857     
+ Partials         935      812      -123
Impacted Files Coverage Δ
...lipse/kapua/service/account/AccountAttributes.java 0.00% <ø> (ø)
...a/service/account/internal/AccountCreatorImpl.java 47.36% <33.33%> (-52.64%) ⬇️
...pse/kapua/service/account/internal/AccountDAO.java 92.00% <100.00%> (+0.33%) ⬆️
...rc/main/java/org/eclipse/kapua/KapuaException.java 0.00% <0.00%> (-100.00%) ⬇️
...c/main/java/org/eclipse/kapua/KapuaErrorCodes.java 0.00% <0.00%> (-100.00%) ⬇️
...in/java/org/eclipse/kapua/broker/BrokerDomain.java 0.00% <0.00%> (-100.00%) ⬇️
...java/org/eclipse/kapua/commons/util/ClassUtil.java 0.00% <0.00%> (-100.00%) ⬇️
...ain/java/org/eclipse/kapua/event/ServiceEvent.java 0.00% <0.00%> (-100.00%) ⬇️
...n/java/org/eclipse/kapua/broker/BrokerDomains.java 0.00% <0.00%> (-100.00%) ⬇️
...va/org/eclipse/kapua/commons/util/SystemUtils.java 0.00% <0.00%> (-100.00%) ⬇️
... and 522 more

@Coduz Coduz merged commit 96ea753 into eclipse-kapua:develop Nov 8, 2022
@Coduz Coduz deleted the chng-bumpCommonsCompressTo1.22 branch November 8, 2022 09:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@stefanomorson stefanomorson Awaiting requested review from stefanomorson

Assignees

No one assigned

Labels

Dependencies PR that updates dependencies. Be on the edge!

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Coduz