Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WINDUP-3926 #961

Merged
merged 4 commits into from
Dec 6, 2023
Merged

WINDUP-3926 #961

merged 4 commits into from
Dec 6, 2023

Conversation

m-brophy
Copy link
Contributor

upgrade jackson-databind for CVE

https://issues.redhat.com/browse/WINDUP-3926

@m-brophy m-brophy added Ready to Review auto-backport Set the PR for being backported labels Nov 15, 2023
@m-brophy m-brophy added auto-backport-to-releases/6.3.z Backport this issue to releases/6.3.z branch and removed auto-backport Set the PR for being backported labels Nov 15, 2023
@PhilipCattanach
Copy link
Contributor

@m-brophy - This looks like a genuine compile failure
/home/runner/work/windup-web/windup-web/model/src/main/java/org/jboss/windup/web/services/json/WindupExecutionJSONUtil.java:[30,36] error: cannot access StreamWriteException
class file for com.fasterxml.jackson.core.exc.StreamWriteException not found

@PhilipCattanach PhilipCattanach added the auto-backport Set the PR for being backported label Nov 17, 2023
@PhilipCattanach PhilipCattanach merged commit 181fb84 into windup:master Dec 6, 2023
5 checks passed
github-actions bot pushed a commit that referenced this pull request Dec 6, 2023
* upgrade jackson-databind

Signed-off-by: m-brophy <[email protected]>

* override jackson-core version from resteasy-jackson2-provider

Signed-off-by: m-brophy <[email protected]>

* remove unneeded import

Signed-off-by: m-brophy <[email protected]>

* add jackson-annotations dependency to fix test failures

---------

Signed-off-by: m-brophy <[email protected]>
(cherry picked from commit 181fb84)
Copy link

github-actions bot commented Dec 6, 2023

💚 All backports created successfully

Status Branch Result
releases/6.3.z

Questions ?

Please refer to the Backport tool documentation and see the Github Action logs for details

mrizzi pushed a commit that referenced this pull request Dec 14, 2023
* upgrade jackson-databind

Signed-off-by: m-brophy <[email protected]>

* override jackson-core version from resteasy-jackson2-provider

Signed-off-by: m-brophy <[email protected]>

* remove unneeded import

Signed-off-by: m-brophy <[email protected]>

* add jackson-annotations dependency to fix test failures

---------

Signed-off-by: m-brophy <[email protected]>
(cherry picked from commit 181fb84)

Co-authored-by: Mark Brophy <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
auto-backport Set the PR for being backported auto-backport-to-releases/6.3.z Backport this issue to releases/6.3.z branch Ready to Review
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants