Uploaded image for project: 'Magnolia DX Core'
  1. Magnolia DX Core
  2. MGNLEE-601

DX Core - Manage three last libraries in dx-core CVE report

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Fixed
    • Icon: Neutral Neutral
    • 6.2
    • None
    • None
    • 6.2 Ramp-up 19, 6.2 Ramp-up 20
    • 0

      commons-collections-3.1.jar

      • exclude in org.apache:jackrabbit-ocm:jar:2.0.0
      • check if any transitive commons-collections >= 3.2.2 drag in, otherwise manage the version in boms & sync with jackrabbit
      • re-check workflow functional

      slf4j-ext-1.7.25

      • exclude in org.testcontainers:testcontainers
      • manage in pom, sync the version with current sl4j libs

      groovy-all-2.2.1.jar

      • manage in boms, same version with groovy group
      • upgrade in magnolia-dx-core-integration-tests

      postgresql-42.1.4.jre7.jar: notified cloud teams.

        Acceptance criteria

              dai.ha Dai Ha
              dai.ha Dai Ha
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved:

                  Task DoR