Apache/struts
1
0
Fork 0
mirror of https://github.com/apache/struts.git synced 2026-08-05 22:56:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

WW-5094 Upgrades Spring and suppresses some TestNG dependencies

Browse Source
This commit is contained in:
Lukasz Lenart
2020-11-08 08:30:24 +01:00
parent 27d91caf15
commit fe5830c26b
2 changed files with 23 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pom.xml
+1 -1
View File
@@ -113,7 +113,7 @@
<log4j2.version>2.13.3</log4j2.version>
<ognl.version>3.2.14</ognl.version>
<slf4j.version>1.7.30</slf4j.version>
<spring.platformVersion>4.3.26.RELEASE</spring.platformVersion>
<spring.platformVersion>4.3.29.RELEASE</spring.platformVersion>
<tiles.version>3.0.8</tiles.version>
<tiles-request.version>1.0.7</tiles-request.version>
src/etc/project-suppression.xml
+22
View File
@@ -168,4 +168,26 @@
<packageUrl regex="true">^pkg:maven/net\.sf\.oval/oval@.*$</packageUrl>
<cpe>cpe:/a:xstream_project:xstream</cpe>
</suppress>
<!-- TestNG -->
<suppress>
<notes><![CDATA[file name: guava-19.0.jar]]></notes>
<packageUrl regex="true">^pkg:maven/com\.google\.guava/guava@.*$</packageUrl>
<cve>CVE-2018-10237</cve>
</suppress>
<suppress>
<notes><![CDATA[file name: snakeyaml-1.21.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.yaml/snakeyaml@.*$</packageUrl>
<cve>CVE-2017-18640</cve>
</suppress>
<suppress>
<notes><![CDATA[file name: testng-7.1.0.jar: jquery-3.4.1.min.js]]></notes>
<packageUrl regex="true">^pkg:javascript/jquery@.*$</packageUrl>
<cve>CVE-2020-11022</cve>
</suppress>
<suppress>
<notes><![CDATA[file name: testng-7.1.0.jar: jquery-3.4.1.min.js]]></notes>
<packageUrl regex="true">^pkg:javascript/jquery@.*$</packageUrl>
<cve>CVE-2020-11023</cve>
</suppress>
<!-- TestNG -->
</suppressions>