Skip to content

Fixed vulnerability CVE-2020-25649, CVE-2020-15522, CVE-2020-9488 and CVE-2019-17571 #36

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 13 commits into from
Aug 13, 2021

Conversation

blasttoys
Copy link
Contributor

@blasttoys blasttoys commented Aug 13, 2021

Description

  • Fixed vulnerability CVE-2020-25649, CVE-2020-15522, CVE-2020-9488 and CVE-2019-17571
  • Update dependency library for bouncycastle to version 1.69
  • Update dependency library for jackson-databind to version 2.10.5.1
  • Remove dependency library for slf4j, updated to log4j version 2.14.1 for logging
  • Update README.md, LICENSE

Fixes # (issue number)

Fixed vulnerability CVE-2020-25649, CVE-2020-15522, CVE-2020-9488 and CVE-2019-17571

Type of change

Please delete options that are not relevant.

  • This change requires a documentation update
  • Security patch

How Has This Been Tested?

Please describe or list the test cases that you ran to verify your changes, and provide instructions so we can reproduce.

Ran maven build option, maven test
Ran gradle build option, gradle test

@blasttoys
Copy link
Contributor Author

All check passed

@GTYeokh GTYeokh merged commit 07e674a into GovTechSG:development Aug 13, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants