Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(dependencies): Upgrade org.postgresql:postgresql to resolve CVE #876

Merged
merged 2 commits into from
Aug 3, 2021

Conversation

j-sandy
Copy link
Contributor

@j-sandy j-sandy commented Aug 3, 2021

As recommended to fix CVE-2020-13692 for all the affected spinnaker services (clouddriver, fiat, front50, orca), proposing the changes in kork.

@dbyron-sf
Copy link
Contributor

Confirmed that 2.2.7 being in org.postgresql:postgresql:4.2.12 and 2.2.8 brings in org.postgresql:postgresql:4.2.14.

@dbyron-sf dbyron-sf added the ready to merge Approved and ready for merge label Aug 3, 2021
@mergify mergify bot merged commit 3bee530 into spinnaker:master Aug 3, 2021
@mergify mergify bot added the auto merged label Aug 3, 2021
@j-sandy j-sandy deleted the postgresql-cve-fix branch August 5, 2021 06:39
ylebedeva pushed a commit to ylebedeva/kork that referenced this pull request May 3, 2022
…spinnaker#876)

* chore(dependencies): Upgrade org.postgresql:postgresql to resolve CVE
CVE-2020-13692

* Added comment about version constraint.

Co-authored-by: j-sandy <jsandy>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants