Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Backport 3.30] Fix CVE #2845

Merged
merged 2 commits into from
Mar 2, 2023
Merged

[Backport 3.30] Fix CVE #2845

merged 2 commits into from
Mar 2, 2023

Conversation

c2c-bot-gis-ci
Copy link
Contributor

Backport of #2820

Error on cherry picking:
Error on backporting to branch 3.30, error on cherry picking 8dd94ea:

To continue do:
git fetch && git checkout backport/2820-to-3.30 && git reset --hard HEAD^
git cherry-pick 8dd94ea
git cherry-pick 4e569c1
git push origin backport/2820-to-3.30 --force

sbrunner added 2 commits March 2, 2023 17:42
    Upgrade org.yaml:[email protected] to org.yaml:[email protected] to fix
    ✗ Arbitrary Code Execution [Medium Severity][https://security.snyk.io/vuln/SNYK-JAVA-ORGYAML-3152153] in org.yaml:[email protected]
      introduced by org.yaml:[email protected]
@sbrunner sbrunner force-pushed the backport/2820-to-3.30 branch from 235c4f5 to cba807b Compare March 2, 2023 16:42
@sbrunner sbrunner enabled auto-merge March 2, 2023 16:59
@sbrunner sbrunner merged commit ca3fa64 into 3.30 Mar 2, 2023
@sbrunner sbrunner deleted the backport/2820-to-3.30 branch March 2, 2023 17:02
@sbrunner sbrunner added the backport master Backport the pull request to the 'master' branch label Mar 3, 2023
@c2c-bot-gis-ci c2c-bot-gis-ci removed the backport master Backport the pull request to the 'master' branch label Mar 3, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants