kazusa
/
skywalking
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Bump up snakeyaml to 1.31 for fixing CVE-2022-25857 (#9567)

This commit is contained in:
吴晟 Wu Sheng 2022-09-06 11:20:01 +08:00 committed by GitHub
parent 4adf8b1933
commit 18d2463813
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
apm-webapp/pom.xml
View File

@ -38,7 +38,7 @@
<frontend-maven-plugin.version>1.12.1</frontend-maven-plugin.version>
<logback-classic.version>1.2.11</logback-classic.version>
<jackson-version>2.13.2.2</jackson-version>
<yaml.version>1.28</yaml.version>
<yaml.version>1.31</yaml.version>
<netty.version>4.1.77.Final</netty.version>
<ui.path>${project.parent.basedir}/skywalking-ui</ui.path>

4
dist-material/release-docs/LICENSE
View File

@ -395,7 +395,7 @@ The text of each license is the standard Apache 2.0 license.
https://mvnrepository.com/artifact/org.springframework.security/spring-security-crypto/5.6.3 Apache-2.0
https://mvnrepository.com/artifact/org.springframework.security/spring-security-rsa/1.0.10.RELEASE Apache-2.0
https://mvnrepository.com/artifact/org.xerial.snappy/snappy-java/1.1.7.3 Apache-2.0
https://mvnrepository.com/artifact/org.yaml/snakeyaml/1.28 Apache-2.0
https://mvnrepository.com/artifact/org.yaml/snakeyaml/1.31 Apache-2.0
https://npmjs.com/package/typescript/v/4.4.4 4.4.4 Apache-2.0
========================================================================
@ -543,7 +543,7 @@ MIT licenses
The following components are provided under the MIT License. See project link for details.
The text of each license is also included in licenses/LICENSE-[project].txt.
https://npmjs.com/package/@babel/parser/v/7.18.13 7.18.13 MIT
https://npmjs.com/package/@babel/parser/v/7.19.0 7.19.0 MIT
https://npmjs.com/package/@ctrl/tinycolor/v/3.4.0 3.4.0 MIT
https://npmjs.com/package/@egjs/hammerjs/v/2.0.17 2.0.17 MIT
https://npmjs.com/package/@element-plus/icons-vue/v/0.2.7 0.2.7 MIT

2
docs/en/changes/changes.md
View File

@ -7,11 +7,13 @@
* Add component ID(133) for impala JDBC Java agent plugin and component ID(134) for impala server
* Use prepareStatement in H2SQLExecutor#getByIDs.(No function change).
* Bump up snakeyaml to 1.31 for fixing CVE-2022-25857
#### UI
* Fix: tab active incorrectly, when click tab space
* Add impala icon for impala JDBC Java agent plugin.
* (Webapp)Bump up snakeyaml to 1.31 for fixing CVE-2022-25857
#### Documentation

2
oap-server-bom/pom.xml
View File

@ -40,7 +40,7 @@
<joda-time.version>2.10.5</joda-time.version>
<zookeeper.version>3.5.7</zookeeper.version>
<guava.version>31.1-jre</guava.version>
<snakeyaml.version>1.28</snakeyaml.version>
<snakeyaml.version>1.31</snakeyaml.version>
<protobuf-java.version>3.19.4</protobuf-java.version>
<protobuf-java-util.version>3.19.4</protobuf-java-util.version>
<commons-codec.version>1.11</commons-codec.version>