pravega / schema-registry

Pravega Schema Registry repository
Apache License 2.0
15 stars 23 forks source link

Issue-281: Updates dependencies version to fix CVE-2023-2976 #282

Closed a6dulaleem closed 11 months ago

a6dulaleem commented 11 months ago

Problem description
Upgrade dependencies in Schema registry which could have possible CVEs

Library | CVE Version -- | -- checkstyleToolVersion|10.12.3 protobufUtilVersion|3.24.3 guavaVersion|32.0.1-jre swaggerJersey2JaxrsVersion|1.6.11

Problem location
gradle.properties

Suggestions for an improvement
upgrade lib versions to suggested versions to mitigate the CVEs.

Purpose of the change Fix #281

a6dulaleem commented 11 months ago

ran schema registry build 171 and it ran successful ran flink connector and it got succeed build number is 420 all test passed.

shshashwat commented 11 months ago

ran schema registry build 171 and it ran successful ran flink connector and it got succeed build number is 420 all test passed.

Please create an issue and tag the PR with that