Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NIFI-11478 Upgrade Spring Framework from 5.3.26 to 5.3.27 #7190

Closed
wants to merge 1 commit into from

Conversation

exceptionfactory
Copy link
Contributor

Summary

NIFI-11478 Upgrades Spring Framework dependencies from 5.3.26 to 5.3.27 to address CVE-2023-20863 and upgrades Spring Security from 5.8.2 to 5.8.3 to address CVE-2023-20862.

Also upgrades Spring Boot from 2.7.10 to 2.7.11 for Registry.

Tracking

Please complete the following tracking steps prior to pull request creation.

Issue Tracking

Pull Request Tracking

  • Pull Request title starts with Apache NiFi Jira issue number, such as NIFI-00000
  • Pull Request commit message starts with Apache NiFi Jira issue number, as such NIFI-00000

Pull Request Formatting

  • Pull Request based on current revision of the main branch
  • Pull Request refers to a feature branch with one commit containing changes

Verification

Please indicate the verification steps performed prior to pull request creation.

Build

  • Build completed using mvn clean install -P contrib-check
    • JDK 11
    • JDK 17

Licensing

  • New dependencies are compatible with the Apache License 2.0 according to the License Policy
  • New dependencies are documented in applicable LICENSE and NOTICE files

Documentation

  • Documentation formatting appears as expected in rendered files

- Upgraded Spring Security from 5.8.2 to 5.8.3
- Upgraded Spring Boot from 2.7.10 to 2.7.11 for Registry
@asfgit asfgit closed this in b67ee50 Apr 23, 2023
asfgit pushed a commit that referenced this pull request Apr 23, 2023
- Upgraded Spring Security from 5.8.2 to 5.8.3
- Upgraded Spring Boot from 2.7.10 to 2.7.11 for Registry

Signed-off-by: Pierre Villard <pierre.villard.fr@gmail.com>

This closes #7190.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants