Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix CVE-2023-25194 in kogito-runtimes #293

Closed
baldimir opened this issue May 30, 2023 · 2 comments
Closed

Fix CVE-2023-25194 in kogito-runtimes #293

baldimir opened this issue May 30, 2023 · 2 comments
Assignees
@baldimir
Labels
area:cicd Related to pipelines, automation. Community GitHub Actions or internal area:dependencies Dependency upgrade/update/migration area:engine Related to the runtime engines type:bug Something is behaving unexpectedly

Comments

@baldimir
Copy link

Issue: GHSA-26f8-x7cc-wqpc

kafka version used in kogito-runtimes contains this vulnerability. The version should be updated to a newer one.

Acceptance criteria:

  • kogito-runtimes uses kafka version not affected by this vulnerability
@baldimir baldimir self-assigned this May 30, 2023
@baldimir baldimir added area:dependencies Dependency upgrade/update/migration area:engine Related to the runtime engines type:bug Something is behaving unexpectedly labels May 30, 2023
@baldimir baldimir mentioned this issue May 30, 2023
Merged
@baldimir
Copy link
Author

PR https://github.com/kiegroup/kogito-runtimes/pull/3022

@baldimir baldimir added the area:cicd Related to pipelines, automation. Community GitHub Actions or internal label Jun 1, 2023
@baldimir
Copy link
Author

baldimir commented Jun 2, 2023

PR merged, closing this.

@baldimir baldimir closed this as completed Jun 2, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@baldimir baldimir

Labels
area:cicd Related to pipelines, automation. Community GitHub Actions or internal area:dependencies Dependency upgrade/update/migration area:engine Related to the runtime engines type:bug Something is behaving unexpectedly
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@baldimir