[JOC-1112] Drop com.google.guava:guava due to 3rd party vulnerability issue CVE-2020-8908 - SOS JIRA

XML

Word

Printable

Details

Type: Fix
Status: Released (View Workflow)
Priority: Minor
Resolution: Fixed
Affects Version/s: 1.13
Fix Version/s: 1.13.10
Component/s: JOC Cockpit Web Service
Labels:
None

CVE-ID:
CVE-2020-8908

Description

Current Situation

Currently JobScheduler components use guava
a vulnerability affects this version,
- see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8908

Desired Behavior

Due to a vulnerability Issue of older guava releases the JobScheduler drops this component.

Attachments

Activity

People

Assignee:: Oliver Haufe

Reporter:: Andreas Püschel

Approver:: Santiago Aucejo Petzoldt

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Dates

Created:: 27 April 2021 06:03

Updated:: 18 December 2021 01:35

Resolved:: 11 May 2021 10:47