Bug #20972
closed
Update spring to 5.2.20 to fix CVE-2022-22965
Added by Vincent MEMBRÉ over 2 years ago.
Updated over 1 year ago.
Description
Even if we are not impacted by this CVE we can update to latest patch version of spring (at least to fix our security check)
- Private changed from No to Yes
- Status changed from New to In progress
- Assignee set to Vincent MEMBRÉ
- Assignee changed from Vincent MEMBRÉ to Nicolas CHARLES
- Pull Request set to https://github.com/Normation/rudder/pull/4230
- Status changed from In progress to Pending release
- Fix check changed from To do to Checked
- Status changed from Pending release to Released
This bug has been fixed in Rudder 6.2.13, 7.0.2 and 7.1.0~rc1 which were released today.
- Private changed from Yes to No
Also available in: Atom
PDF