Update apache commons-text lib #5718

Activity

1. Lonzak

   added

   defect

   to-triage

   on Oct 20, 2022
2. asfgit

   closed this as completedin fb557d5on Oct 20, 2022
3. Lonzak commented on Oct 20, 2022

   

   Lonzak

   on Oct 20, 2022

   Last edited by Lonzak

   Author

   More actions

   The CVE (https://nvd.nist.gov/vuln/detail/CVE-2022-42889)
   doesn't concern us, as we are not using the affected class StringSubstitutor
   in our code.

   But it is always a good idea, to keep our dependencies up to date.

   Thank you nevertheless for updating - since all scanners alert anyway when finding a vulnerable library (even though the effected class is not directly used). By using an up-to-date lib it is now much easier to argue with the decision makers / security guys...

   👍React with 👍1Reacted by DMan
4. groot327 commented on Dec 7, 2022

   

   groot327

   on Dec 7, 2022

   More actions

   Looking at the contents of the ZIP and the Release Notes, commons-text v1.10 is not part of JMeter 5.5. Would anyone be able to confirm when this will be released?
5. Lonzak commented on Dec 7, 2022

   

   Lonzak

   on Dec 7, 2022

   Author

   More actions

   Looking at the contents of the ZIP and the Release Notes, commons-text v1.10 is not part of JMeter 5.5. Would anyone be able to confirm when this will be released?

   Jmeter 5.5 contains commons-text-1.9 and has been released in June 2022 long before this issue was created. The Update to 1.10 will be part of the next jmeter release...

   👍React with 👍1Reacted by groot327
6. groot327 commented on Dec 7, 2022

   

   groot327

   on Dec 7, 2022

   More actions

   Thank you. That's what I thought, but the previous comments (Oct, Nov) made me want to ask the question.
7. vlsi

   added this to the 5.6 milestone on May 20, 2023
8. rithvikp1998

   added a commit that references this issue on Mar 24, 2024

   Update Apache commons-text to 1.10.0 (from 1.9)

   ...

   This issue will close once commit fb557d5 is merged into the 'master' branch.

   fb557d5