You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "frankvicky (via GitHub)" <gi...@apache.org> on 2025/04/17 03:47:47 UTC
[PR] AMBARI-26448: Update org.springframework.security:* to the latest [ambari]
frankvicky opened a new pull request, #3993:
URL: https://github.com/apache/ambari/pull/3993
## What changes were proposed in this pull request?
Bump the spring version to the latest.
## How was this patch tested?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@ambari.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ambari.apache.org
For additional commands, e-mail: dev-help@ambari.apache.org
Re: [PR] AMBARI-26448: Update org.springframework.security:* to the latest [ambari]
Posted by "frankvicky (via GitHub)" <gi...@apache.org>.
frankvicky commented on PR #3993:
URL: https://github.com/apache/ambari/pull/3993#issuecomment-2813313966
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@ambari.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ambari.apache.org
For additional commands, e-mail: dev-help@ambari.apache.org
Re: [PR] AMBARI-26448: Update org.springframework.security:* to the latest [ambari]
Posted by "JiaLiangC (via GitHub)" <gi...@apache.org>.
JiaLiangC commented on PR #3993:
URL: https://github.com/apache/ambari/pull/3993#issuecomment-2812169702
@frankvicky Have you ever deployed a cluster for testing, and does upgrading Spring Security lead to a series of dependency upgrades?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@ambari.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ambari.apache.org
For additional commands, e-mail: dev-help@ambari.apache.org
Re: [PR] AMBARI-26448: Update org.springframework.security:* to the latest [ambari]
Posted by "frankvicky (via GitHub)" <gi...@apache.org>.
frankvicky commented on PR #3993:
URL: https://github.com/apache/ambari/pull/3993#issuecomment-2813310323
Hi @JiaLiangC,
Thanks for the question.
I think we should redefine the scope of this issue.
The `spring-web` and `security` modules have CVE issues, but we can resolve the `spring-web` issue by upgrading to a minor version.
We should open another ticket to track the `security` CVE issue, as we were unable to resolve it by upgrading to a minor version.
c.c @jojochuang
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@ambari.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ambari.apache.org
For additional commands, e-mail: dev-help@ambari.apache.org
Re: [PR] AMBARI-26448: Update org.springframework:* to 6.0.23 [ambari]
Posted by "jojochuang (via GitHub)" <gi...@apache.org>.
jojochuang merged PR #3993:
URL: https://github.com/apache/ambari/pull/3993
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@ambari.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ambari.apache.org
For additional commands, e-mail: dev-help@ambari.apache.org