Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade commons-compress to 1.26.2 #694

Merged
merged 1 commit into from
Jun 24, 2024
Merged

Upgrade commons-compress to 1.26.2 #694

merged 1 commit into from
Jun 24, 2024

Conversation

jowiho
Copy link
Contributor

@jowiho jowiho commented Jun 11, 2024

Upgrade org.apache.commins:commons-compress to the current latest version (1.26.2) to avoid CVE-2024-25710. Even though I don't believe that the CVE affects this project, it's still better to upgrade to a non-vulnerable version.

Checklist

  • I have verified that the APIs in this pull request do not return sensitive data

Upgrade org.apache.commins:commons-compress to the current latest version (1.26.2) to avoid CVE-2024-25710. Even though I don't believe that the CVE affects this project, it's still better to upgrade to a non-vulnerable version.
@jowiho jowiho requested a review from a team as a code owner June 11, 2024 06:36
@pickypg pickypg merged commit 904e22d into elastic:main Jun 24, 2024
4 checks passed
@jowiho jowiho deleted the patch-1 branch June 24, 2024 16:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants