Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[SP-3097] Backport of PPP-3581 - CVE-2015-0250 - Batik 1.7 is vulnera… #3389

Merged
merged 1 commit into from
Feb 3, 2017
Merged

[SP-3097] Backport of PPP-3581 - CVE-2015-0250 - Batik 1.7 is vulnera… #3389

merged 1 commit into from
Feb 3, 2017

Conversation

stanislau-strelchanka
Copy link
Contributor

[SP-3097] Backport of PPP-3581 - CVE-2015-0250 - Batik 1.7 is vulnerable to XXE in SVG to PNG and SVG to JPG conversion classes (6.1 Suite)

@wingman-pentaho
Copy link
Collaborator

Build Completed

❌ This pull request has errors. They will need to be addressed before it can be accepted. See below for more details. Some links are also available below for further assistance in addressing those issues.

Build Commands

ant -Dtestreports.dir=bin/reports/unit-test -f core/build.xml clean-all resolve jacoco && ant -f core/build.xml checkstyle publish-local
ant -Dtestreports.dir=bin/reports/unit-test -f extensions/build.xml clean-all resolve jacoco && ant -f extensions/build.xml checkstyle publish-local

Cleanup Commands

rm -r ~/.ivy2/local || echo no publish local to remove

Changed files

  assembly/ivy.xml
  core/build.properties
  core/ivy.xml
  extensions/build.properties
  extensions/ivy.xml

Newly Broken Tests:

org.pentaho.platform.engine.core.system.status.PeriodicStatusLoggerTest.test:

🔴 junit.framework.AssertionFailedError

junit.framework.AssertionFailedError: expected:<2> but was:<1>
	at org.pentaho.platform.engine.core.system.status.PeriodicStatusLoggerTest.test(PeriodicStatusLoggerTest.java:70)

Unit test coverage change

These statistics help you identify how your changes have affected the coverage of the following files. If a file is not in this list, then its coverage was not affected by your changes. To get some help interpreting these metrics, please refer to Jacoco's documentation.

org.pentaho.platform.engine.core.system.status.PeriodicStatusLogger
  • Branch Change: -27.27%🔻
  • Complexity Change: -16.67%🔻
  • Instruction Change: -25.71%🔻
  • Line Change: -27.66%🔻
  • Method Change: -15.38%🔻
org.pentaho.platform.engine.security.event.OrderedApplicationEventMulticaster.new Comparator() {...}
  • Branch Change: + 12.50%
  • Complexity Change: + 16.67%
  • Instruction Change: + 6.25%
  • Line Change: + 12.50%
org.pentaho.platform.admin.GeneratedContentCleaner
  • Branch Change: + 10.00%
  • Complexity Change: + 9.09%
org.pentaho.platform.plugin.services.metadata.PentahoMetadataDomainRepository
  • Branch Change: + .56%
  • Complexity Change: + .71%
org.pentaho.platform.plugin.services.metadata.PentahoMetadataInformationMap
  • Branch Change: + 6.25%
  • Complexity Change: + 5.00%

…ble to XXE in SVG to PNG and SVG to JPG conversion classes (6.1 Suite)
@stanislau-strelchanka
Copy link
Contributor Author

stanislau-strelchanka commented Feb 1, 2017

backport of #3291

@mbatchelor mbatchelor merged commit cc8438c into pentaho:6.1 Feb 3, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants