Skip to content

fix(TPRUN-7272): struts features removal | CVE-2023-50164#92

Merged
stataru8 merged 3 commits intotesb/karaf-4.2.7.xfrom
stataru/fix/TPRUN-7272-remove-spring-legacy-feat
Jan 10, 2024
Merged

fix(TPRUN-7272): struts features removal | CVE-2023-50164#92
stataru8 merged 3 commits intotesb/karaf-4.2.7.xfrom
stataru/fix/TPRUN-7272-remove-spring-legacy-feat

Conversation

@stataru8
Copy link

@stataru8 stataru8 commented Jan 9, 2024

🏁 Context (Jira, design, ...)

🔍 What is the problem this PR is trying to solve?
Fix Struts features CVE.

🚀 What is the chosen solution to this problem?
Empty all the Karaf spring-legacy feats.

🎾 Impacts

  • This PR introduces a breaking change

Dear contributor, please check if the PR fulfills these requirements

  • The PR commit message follows our guidelines
  • Tests for the changes have been added (for bug fixes / features)
  • Docs have been added / updated (for bug fixes / features)
  • Related design / discussions / pages (not in jira), if any, are all linked or available in the PR

@stataru8 stataru8 requested a review from a team as a code owner January 9, 2024 15:57
@stataru8 stataru8 changed the title fix(TPRUN-7272): Struts features removal | CVE-2023-50164 fix(TPRUN-7272): struts features removal | CVE-2023-50164 Jan 9, 2024
Copy link

@andreasmattes andreasmattes left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@stataru8 stataru8 merged commit bfc0e7c into tesb/karaf-4.2.7.x Jan 10, 2024
@stataru8 stataru8 deleted the stataru/fix/TPRUN-7272-remove-spring-legacy-feat branch January 10, 2024 18:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

Comments