Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[7.67.x-blue] update knockout-min-3.4.0.js to version 3.5.0-rc #1434

Open
wants to merge 1 commit into
base: 7.67.x-blue
Choose a base branch
from

Conversation

AthiraHari77
Copy link

@AthiraHari77 AthiraHari77 commented Jan 27, 2025

The current knockout-min-3.4.0.js is affected by [CVE-2019-14862]
Updating knockout to ´3.5.0-rc´ resolves the CVE

@AthiraHari77
Copy link
Author

Jenkins run fdb

@AthiraHari77 AthiraHari77 changed the title [7.67.x-blue] DBACLD-164350 [CVE] [Medium] CVE-2019-14862 knockout-min-3.4.0.js [7.67.x-blue] CVE-2019-14862 knockout-min-3.4.0.js update version Jan 27, 2025
@AthiraHari77 AthiraHari77 changed the title [7.67.x-blue] CVE-2019-14862 knockout-min-3.4.0.js update version [7.67.x-blue] update knockout-min-3.4.0.js to version 3.5.0-rc Jan 27, 2025
@yesamer yesamer requested review from baldimir and yesamer January 27, 2025 10:09
@yesamer yesamer marked this pull request as ready for review January 27, 2025 10:10
@yesamer
Copy link
Member

yesamer commented Jan 27, 2025

Jenkins run fdb

@yesamer
Copy link
Member

yesamer commented Jan 27, 2025

Jenkins retest this

@baldimir
Copy link
Member

jenkins run cdb

@yesamer
Copy link
Member

yesamer commented Jan 29, 2025

Jenkins run fdb

@yesamer
Copy link
Member

yesamer commented Jan 29, 2025

It seems the FDB for this repo is broken (it always fails after 1 second).

The PR looks good, but I would check this change locally against kie-wb-common and drools-wb repos

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants