Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Update dnsjava to version 3.6.0 if applicable

Description

Update dnsjava to version 3.6.0 if applicable for

Acceptance / Success Criteria

None

Activity

Show:

Christian Pape October 11, 2024 at 9:07 AM

Merged.

Christian Pape October 10, 2024 at 5:51 AM

Nishtha Kaura October 8, 2024 at 1:18 AM

Reviewed by Information Security

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L

CVSS score 8.9 x likelihood moderate 0.8 = 7.12 High

Christian Pape September 13, 2024 at 5:45 AM

We are using the Apache service-mix bundle of dnsjava. Of course, we can exclude the current dependency top dnsjava and include a newer version but I would favor to wait for the service-mix update which updates dnsjava to 3.6.0.

Veena Kannan September 6, 2024 at 5:45 PM
Edited

This is also found in PB 2023 recent scan. Fix needs to be applied for both PB2023 & 2024.

Fixed

Details

Assignee

Reporter

Labels

HB Grooming Date

HB Backlog Status

Sprint

Fix versions

Priority

Parent

PagerDuty

Created September 4, 2024 at 3:00 AM
Updated November 12, 2024 at 2:10 PM
Resolved October 11, 2024 at 9:07 AM