This repository was archived by the owner on Jul 15, 2021. It is now read-only.
3.2-2021.03.02.15.08
·
20 commits
to master
since this release
Dependency upgrades due to non-applicable vulnerabilities in
dependencies.
- Spring Boot 2.4.3
This upgrades to Undertow 2.2.4.Final and prevents non-applicable warnings
about CVE-2020-27782 in the projects dependencies. The CVE is a denial of
service attack that is not applicable to RPKI Validator 3 because the AJP
connector is not used. - Netty 4.1.59
This upgrades to netty-handler 4.1.59 and prevents a non-applicable warning
about CVE-2021-21290 which is a local information disclosure issue in netty
iff the multipart decoder is used.