Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Force version 3.29.0 of org.eclipse.core.runtime to address CVE vulnerabilities #3313

Merged

Conversation

rithin-pullela-aws
Copy link
Contributor

Description

Address CVE vulnerability in plugin/build.gradle: org.eclipse.core.runtime-3.26.100.jar by forcing version 3.29.0

Related Issues

Resolves #[Issue number to be closed when this PR is merged]

Check List

  • New functionality includes testing.
  • New functionality has been documented.
  • API changes companion pull request created.
  • Commits are signed per the DCO using --signoff.
  • Public documentation issue/PR created.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

@dhrubo-os
Copy link
Collaborator

Cool, looks like Mend Security Check is Successful. While you are working on CVE, let's look into this too: #1865

@rithin-pullela-aws rithin-pullela-aws temporarily deployed to ml-commons-cicd-env-require-approval December 31, 2024 19:45 — with GitHub Actions Inactive
@dhrubo-os dhrubo-os merged commit 7af78b0 into opensearch-project:main Jan 2, 2025
9 checks passed
opensearch-trigger-bot bot pushed a commit that referenced this pull request Jan 2, 2025
…erabilities (#3313)

Signed-off-by: rithin-pullela-aws <[email protected]>
(cherry picked from commit 7af78b0)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants