Skip to content

[kie-issues#1821][CVE]-2023-0833 Updating okhttp#1438

Open
LightGuard wants to merge 1 commit intokiegroup:7.67.x-bluefrom
LightGuard:CVE-2023-0833
Open

[kie-issues#1821][CVE]-2023-0833 Updating okhttp#1438
LightGuard wants to merge 1 commit intokiegroup:7.67.x-bluefrom
LightGuard:CVE-2023-0833

Conversation

@LightGuard
Copy link
Copy Markdown
Member

Had to go through a number of changes to get this all correct.
The versions of anything from squareup need to be correct, but that also
ended up needing Bouncy Castle for some of the tests as well.

Signed-off-by: Jason Porter <[email protected]>
@LightGuard
Copy link
Copy Markdown
Member Author

[2025-02-21T21:19:09.869Z] Caused by: java.lang.IllegalStateException: WFLYSRV0124: Could not create server data directory: /home/jenkins/workspace/KIE/7.67.x-blue/compile/appformer-7.67.x-blue.compile/bc/kiegroup_kie-wb-distributions/business-central-parent/business-central-webapp/target/bootable-jar-build-artifacts/wildfly/standalone/data

That doesn't make any sense.

@LightGuard LightGuard requested a review from baldimir February 21, 2025 21:57
<!-- Add this to match other versions of okhttp3 and okio used elsewhere -->
<version.com.squareup.okhttp3>4.12.0</version.com.squareup.okhttp3>
<version.com.squareup.okio>3.6.0</version.com.squareup.okio>
<version.org.bouncycastle>1.78.1</version.org.bouncycastle>
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@LightGuard Why we need to declare those versions here? Can't we use the same declared in the parent pom in droolsjbpm-build-bootstrap ?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No idea. I have a duplicate class issue locally, which does not appear to be related. Are other builds green without this change?

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@LightGuard Related PRs get merged, thus I guess this PR is no longer necessary
//cc @baldimir

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants