Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Upgrade dom4j to latest version

Description

We have a transitive dependency via Hibernate core on dom4j-1.5.1. The latter needs upgrading to mitigate against an XXE (XML External Entity) vulnerability.

Acceptance / Success Criteria

  • dom4j artifact updated to latest version

  • Smoke tests passing

  • Karaf features files manually checked and updated to avoid runtime breakage

Lucidchart Diagrams

Activity

Show:

Gabriela Lopez March 9, 2023 at 7:30 PM

Benjamin Reed August 30, 2022 at 3:53 PM

Merged to foundation-2019

Benjamin Reed August 30, 2022 at 2:27 PM

Fixed

Details

Assignee

Reporter

Labels

HB Grooming Date

HB Backlog Status

FD#

Story Points

Components

Sprint

Fix versions

Affects versions

Priority

Parent

PagerDuty

Created August 29, 2022 at 8:08 PM
Updated June 27, 2023 at 9:45 PM
Resolved August 30, 2022 at 3:53 PM