New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security update: Patch vuln related to okhttp3 dep CVE-2021-0341 #251

Closed

atsim1 wants to merge 2 commits into splunk:main from atsim1:patch-1

atsim1 commented May 9, 2022

This should fix the critical vulnerability ( CVE-2021-0341) found in the "okhttp3" dependency.
Okhttp3 changelog: https://square.github.io/okhttp/changelogs/changelog_4x/
Vuln info: https://nvd.nist.gov/vuln/detail/CVE-2021-0341
Okhttp3 fix pr: square/okhttp#6740

atsim1 and others added 2 commits

May 9, 2022 14:17


          Security update: Patch vulnerability related to okhttp3 dep CVE-2021-…

e42717f

…0341

This should fix the critical vulnerability ( CVE-2021-0341) found in the "okhttp3" dependency.
Okhttp3 changelog: https://square.github.io/okhttp/changelogs/changelog_4x/
Vuln info: https://nvd.nist.gov/vuln/detail/CVE-2021-0341
Okhttp3 fix pr: square/okhttp#6740


          sec-fix: bump version of gson and log4j (CVE-2022-25647 and CVE-2021-…

dbc07df

…44832)

Author

atsim1 commented May 10, 2022

Added patched versions of log4j and gson

bparmar-splunk requested a review from mbukowski-splunk

June 2, 2022 07:09

Contributor

bparmar-splunk commented Jun 2, 2022

Hi @atsim1,
There are conflicts with this PR. We have considered your changes in new PR.

Hence, closing this PR.

bparmar-splunk closed this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment