Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade guava to avoid security issues #857

Closed
vegegoku opened this issue Oct 17, 2023 · 0 comments
Closed

Upgrade guava to avoid security issues #857

vegegoku opened this issue Oct 17, 2023 · 0 comments
Assignees
Labels
enhancement New feature or request
Projects
Milestone

Comments

@vegegoku
Copy link
Member

vegegoku commented Oct 17, 2023

Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.

Even though the security vulnerability is fixed in version 32.0.0, maintainers recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.

Even though this might not be relevant in the client side we still try to avoid adding a vulnerable dependency to our tools.

@vegegoku vegegoku added the enhancement New feature or request label Oct 17, 2023
@vegegoku vegegoku added this to the 1.0.4 milestone Oct 17, 2023
@vegegoku vegegoku self-assigned this Oct 17, 2023
@vegegoku vegegoku added this to To do in Domino UI via automation Oct 17, 2023
Domino UI automation moved this from To do to Done Oct 17, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Domino UI
  
Done
Development

No branches or pull requests

1 participant