Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update Guava #1298

Closed
ethanmills opened this issue Jun 15, 2023 · 2 comments
Closed

Update Guava #1298

ethanmills opened this issue Jun 15, 2023 · 2 comments
Labels
fixed

Comments

@ethanmills
Copy link
Contributor

Guava < 32.0 is marked as vulnerable to CVE-2023-2976

https://avd.aquasec.com/nvd/2023/cve-2023-2976/
ethanmills added a commit to ethanmills/javers that referenced this issue Jun 15, 2023
@ethanmills
javers#1298 Update guava to 32.0.1-jre
9f668c5 
Patches CVE-2023-2976
https://avd.aquasec.com/nvd/2023/cve-2023-2976/
@ethanmills ethanmills mentioned this issue Jun 15, 2023
Merged
bartoszwalacik added a commit that referenced this issue Jun 16, 2023
@bartoszwalacik
Merge pull request #1299 from ethanmills/patch-1
b79d23a 
#1298 Update guava to 32.0.1-jre
@ethanmills
Copy link
Contributor Author

Thanks @bartoszwalacik!

@bartoszwalacik
Copy link
Member

released in 7.0.1, thanks @ethanmills

bartoszwalacik pushed a commit that referenced this issue Jul 10, 2023
@ethanmills @bartoszwalacik
#1298 Update guava to 32.0.1-jre
9352d90 
Patches CVE-2023-2976
https://avd.aquasec.com/nvd/2023/cve-2023-2976/
bartoszwalacik pushed a commit that referenced this issue Jul 16, 2023
@ethanmills @bartoszwalacik
#1298 Update guava to 32.0.1-jre
3538675 
Patches CVE-2023-2976
https://avd.aquasec.com/nvd/2023/cve-2023-2976/
bartoszwalacik pushed a commit that referenced this issue Jul 27, 2023
@ethanmills @bartoszwalacik
#1298 Update guava to 32.0.1-jre
5d29877 
Patches CVE-2023-2976
https://avd.aquasec.com/nvd/2023/cve-2023-2976/
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
fixed
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@bartoszwalacik @ethanmills