Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade spring-security to 5.7.5 #32145

Merged
merged 2 commits into from
Nov 15, 2022
Merged

Upgrade spring-security to 5.7.5 #32145

merged 2 commits into from
Nov 15, 2022

Conversation

chenrujun
Copy link

@chenrujun chenrujun commented Nov 15, 2022 •
edited
Loading

Description

Upgrade spring-security to 5.7.5. To mitigate cve-2022-31690. Refs: https://tanzu.vmware.com/security/cve-2022-31690

All SDK Contribution checklist:

  • The pull request does not introduce [breaking changes]
  • CHANGELOG is updated for new features, bug fixes or other significant changes.
  • I have read the contribution guidelines.

General Guidelines and Best Practices

  • [x Title of the pull request is clear and informative.
  • There are a small number of commits, each of which have an informative message. This means that previously merged commits do not appear in the history of the PR. For more information on cleaning up the commits in your PR, see this page.

Testing Guidelines

  • Pull request includes test coverage for the included changes.

@ghost ghost added the azure-spring All azure-spring related issues label Nov 15, 2022
backwind1233
backwind1233 approved these changes Nov 15, 2022
View reviewed changes
Copy link
Contributor

@backwind1233 backwind1233 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@azure-sdk
Copy link
Collaborator

API change check

API changes are not detected in this pull request.

@chenrujun chenrujun self-assigned this Nov 15, 2022
@chenrujun chenrujun added bug This issue requires a change to an existing behavior in the product in order to be resolved. Client This issue points to a problem in the data-plane of the library. labels Nov 15, 2022
@chenrujun chenrujun added this to the 2022-12 milestone Nov 15, 2022
@chenrujun chenrujun merged commit 3b179c1 into Azure:main Nov 15, 2022
@chenrujun chenrujun deleted the upgrade-spring-security-to-5.7.5 branch November 15, 2022 02:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@backwind1233 backwind1233 backwind1233 approved these changes

@alzimmermsft alzimmermsft Awaiting requested review from alzimmermsft alzimmermsft is a code owner

@samvaity samvaity Awaiting requested review from samvaity samvaity is a code owner

@g2vinay g2vinay Awaiting requested review from g2vinay g2vinay is a code owner

@JonathanGiles JonathanGiles Awaiting requested review from JonathanGiles JonathanGiles is a code owner

@hui1110 hui1110 Awaiting requested review from hui1110

@Netyyyy Netyyyy Awaiting requested review from Netyyyy Netyyyy is a code owner

@saragluna saragluna Awaiting requested review from saragluna saragluna is a code owner

@stliu stliu Awaiting requested review from stliu

@yiliuTo yiliuTo Awaiting requested review from yiliuTo

@moarychan moarychan Awaiting requested review from moarychan moarychan is a code owner

@fangjian0423 fangjian0423 Awaiting requested review from fangjian0423

Assignees

@chenrujun chenrujun

Labels
azure-spring All azure-spring related issues bug This issue requires a change to an existing behavior in the product in order to be resolved. Client This issue points to a problem in the data-plane of the library.
Projects
Spring Cloud Azure
Status: Done
Milestone
2022-12
Development

Successfully merging this pull request may close these issues.
4 participants
@chenrujun @azure-sdk @backwind1233 @rujche