Uploaded image for project: 'Camunda Optimize'
  1. Camunda Optimize
  2. OPT-6197

Optimize 3.8.2 Dependency Update

XMLWordPrintable

    • Not defined

      Context:

      With Optimize 3.8.2 a couple of dependencies got updated:

      https://github.com/camunda/camunda-optimize/pulls?q=is%3Apr+is%3Amerged+base%3Amaintenance%2F3.8++label%3Adependencies+

      Updates backend dependencies:

      Updates frontend dependencies:

      AT:

        This is the controller panel for Smart Panels app

            [OPT-6197] Optimize 3.8.2 Dependency Update

            Sebastian Bathke added a comment -

            https://github.com/camunda/camunda-platform-docs/pull/905

            Sebastian Bathke added a comment - https://github.com/camunda/camunda-platform-docs/pull/905

            Sebastian Bathke added a comment - - edited

            In terms of CVEs:

            java-jwt from 3.19.1 to 3.19.2 contained:

            Assessment: This CVE relates to the JDK used and is this not considered worth mentioning from the Camunda perspective. Customers should update the JDK, as our docker image ships with the JDK 11 which is according to the CVE not affected we don't need to communicate proactively about this CVE.

            spring-framework 5.3.19/20 contained:

            Assessment: Optimize wasn't affected by that as Spring MVC/Webflux is not used.

            Sebastian Bathke added a comment - - edited In terms of CVEs: java-jwt from 3.19.1 to 3.19.2 contained: [SDK-3311] Added protection against https://nvd.nist.gov/vuln/detail/CVE-2022-21449 Assessment: This CVE relates to the JDK used and is this not considered worth mentioning from the Camunda perspective. Customers should update the JDK, as our docker image ships with the JDK 11 which is according to the CVE not affected we don't need to communicate proactively about this CVE. spring-framework 5.3.19/20 contained: fix for https://nvd.nist.gov/vuln/detail/CVE-2022-22965 Assessment: Optimize wasn't affected by that as Spring MVC/Webflux is not used.

              Unassigned Unassigned
              sebastian.bathke Sebastian Bathke
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: