Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump AkkaVersion to 2.5.16 #1562

Closed
hughesj opened this issue Aug 30, 2018 · 3 comments
Closed

Bump AkkaVersion to 2.5.16 #1562

hughesj opened this issue Aug 30, 2018 · 3 comments
Milestone
Lagom 1.4.8

Comments

@hughesj
Copy link

hughesj commented Aug 30, 2018

Lagom Version (1.2.x / 1.3.x / etc)

1.4.x

API (Scala / Java / Neither / Both)

Both

Operating System (Ubuntu 15.10 / MacOS 10.10 / Windows 10)

all

JDK (Oracle 1.8.0_112, OpenJDK 1.8.x, Azul Zing)

all

Library Dependencies

Akka 2.5.15 is a dependency of the latest Lagom 1.4.x (1.4.7). Please bump this to 2.5.16 due to https://nvd.nist.gov/vuln/detail/CVE-2018-16115
@ignasi35
Copy link
Contributor

While this fix is not released, users of Lagom may override the version of the Akka dependency so their applications use the version 2.5.16.

@eed3si9n
Copy link

While this fix is not released, users of Lagom may override the version of the Akka dependency so their applications use the version 2.5.16.

Jeremy first contacted me to do exactly that ("override the version"), but there are lots of Akka-* modules that gets used in Lagom, so I thought it's best if we fix this by propagating the latest version.

@TimMoore TimMoore added this to the Lagom 1.4.8 milestone Aug 30, 2018
@ayushprashar ayushprashar mentioned this issue Aug 31, 2018
Merged
5 tasks
@ayushprashar
Copy link
Contributor

ayushprashar commented Aug 31, 2018 •
edited
Loading

I've raised a PR on the issue if you could have a look. @hughesj @ignasi35

ignasi35 pushed a commit that referenced this issue Aug 31, 2018
@ayushprashar @ignasi35
Updated akka version to 2.5.16 (#1564)
06b6615 
# Pull Request Checklist

* [x] Have you read through the [contributor guidelines](https://github.com/lagom/lagom/tree/master/CONTRIBUTING.md)?
* [x] Have you signed the [Lightbend CLA](https://www.lightbend.com/contribute/cla)?
* [x] Have you added copyright headers to new files?
* [x] Have you updated the documentation?
* [x] Have you added tests for any changed functionality?

## Fixes

Fixes #1562 

## Purpose

What does this PR do?
This PR updates the akka version.
## Background Context

Why did you take this approach?

## References

Are there any relevant issues / PRs / mailing lists discussions?
@ignasi35 ignasi35 mentioned this issue Aug 31, 2018
Merged
@hughesj hughesj mentioned this issue Aug 31, 2018
Closed
@ignasi35 ignasi35 mentioned this issue Aug 31, 2018
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Milestone
Lagom 1.4.8
Development

No branches or pull requests
5 participants
@TimMoore @eed3si9n @ignasi35 @hughesj @ayushprashar