Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Issues

Select view

Select search mode

 
1 of 1

Upgrade dom4j to latest version

Fixed

Description

We have a transitive dependency via Hibernate core on dom4j-1.5.1. The latter needs upgrading to mitigate against an XXE (XML External Entity) vulnerability.

Acceptance / Success Criteria

  • dom4j artifact updated to latest version

  • Smoke tests passing

  • Karaf features files manually checked and updated to avoid runtime breakage

Lucidchart Diagrams

Details

Assignee

Reporter

Labels

HB Grooming Date

HB Backlog Status

FD#

Story Points

Components

Sprint

Fix versions

Affects versions

Priority

Parent

PagerDuty

Created August 29, 2022 at 8:08 PM
Updated June 27, 2023 at 9:45 PM
Resolved August 30, 2022 at 3:53 PM

Activity

Show:

Gabriela LopezMarch 9, 2023 at 7:30 PM

Benjamin ReedAugust 30, 2022 at 3:53 PM

Merged to foundation-2019

Benjamin ReedAugust 30, 2022 at 2:27 PM