Skip to content
[Jenkins]Jenkins
log in
Success

Changes

Summary

  1. [GovWayCore] (commit: cc2939e) (details)
  2. [GovWayCore] (commit: 1ea3614) (details)
  3. [GovWayCore, GovWayConsole] (commit: 35902e6) (details)
Commit cc2939e974e036dc66d9bd01841528c4c5f40429 by Andrea Poli
[GovWayCore]
È stata risolta la seguente vulnerabilità relativa al jar di terza parte:
- CVE-2024-25710: aggiornata libreria 'org.apache.commons:commons-compress' alla versione 1.26.0
 (commit: cc2939e)
The file was modified ChangeLog (diff)
The file was modified core/ant/openspcoop2-ear.xml (diff)
The file was modified mvn/dependencies/commons/pom.xml (diff)
The file was removedthird-party-licenses/commons/commons-compress-1.21/LICENSE.txt
The file was modified lib/openspcoop2.userlibraries (diff)
The file was modified resources/doc/src/manuali/vulnerability-management/securityAdvisory/2024/index.rst (diff)
The file was addedthird-party-licenses/commons/commons-compress-1.26.0/LICENSE.txt
The file was modified tools/web_interfaces/control_station/ant/openspcoop2-govwayConsole-war.xml (diff)
The file was modified mvn/dependencies/owasp/falsePositives/CVE-2021-37533.xml (diff)
The file was modified core/ant/openspcoop2-war.xml (diff)
The file was addedresources/doc/src/manuali/vulnerability-management/securityAdvisory/2024/CVE-2024-25710.rst
The file was modified tools/utils/src/org/openspcoop2/utils/io/CompressorUtilities.java (diff)
Commit 1ea361475eff72a310bce32fa2cdc30c13bad053 by Andrea Poli
[GovWayCore]
È stata risolta la seguente vulnerabilità relativa al jar di terza parte:
- CVE-2024-22243: aggiornata libreria 'org.springframework:*' alla versione 5.3.32
 (commit: 1ea3614)
The file was addedresources/doc/src/manuali/vulnerability-management/securityAdvisory/2024/CVE-2024-22243.rst
The file was modified lib/openspcoop2.userlibraries (diff)
The file was removedthird-party-licenses/spring/spring-beans-5.3.27/license.txt
The file was addedthird-party-licenses/spring/spring-context-5.3.32/license.txt
The file was removedthird-party-licenses/spring/spring-aop-5.3.27/license.txt
The file was addedthird-party-licenses/spring/spring-orm-5.3.32/license.txt
The file was addedthird-party-licenses/spring/spring-tx-5.3.32/license.txt
The file was addedthird-party-licenses/spring/spring-core-5.3.32/license.txt
The file was removedthird-party-licenses/spring/spring-tx-5.3.27/license.txt
The file was modified mvn/dependencies/owasp/falsePositives/spring-web.xml (diff)
The file was removedthird-party-licenses/spring/spring-orm-5.3.27/license.txt
The file was modified testsuite/ant/openspcoop2-testsuite-war.xml (diff)
The file was addedthird-party-licenses/spring/spring-expression-5.3.32/license.txt
The file was modified ChangeLog (diff)
The file was removedthird-party-licenses/spring/spring-context-5.3.27/license.txt
The file was addedthird-party-licenses/spring/spring-web-5.3.32/license.txt
The file was removedthird-party-licenses/testsuite/spring-jdbc-5.3.27/license.txt
The file was removedthird-party-licenses/spring/spring-expression-5.3.27/license.txt
The file was removedthird-party-licenses/spring/spring-web-5.3.27/license.txt
The file was modified mvn/dependencies/pom.xml (diff)
The file was addedthird-party-licenses/spring/spring-aspects-5.3.32/license.txt
The file was addedthird-party-licenses/spring/spring-context-support-5.3.32/license.txt
The file was addedthird-party-licenses/testsuite/spring-jdbc-5.3.32/license.txt
The file was addedthird-party-licenses/spring/spring-beans-5.3.32/license.txt
The file was removedthird-party-licenses/spring/spring-core-5.3.27/license.txt
The file was modified tools/command_line_interfaces/config_loader/build.xml (diff)
The file was modified core/ant/openspcoop2-ear.xml (diff)
The file was addedthird-party-licenses/spring/spring-aop-5.3.32/license.txt
The file was removedthird-party-licenses/spring/spring-aspects-5.3.27/license.txt
The file was removedthird-party-licenses/spring/spring-context-support-5.3.27/license.txt
The file was modified resources/doc/src/manuali/vulnerability-management/securityAdvisory/2024/index.rst (diff)
Commit 35902e653d2cb99b3cab0f426f135507919c37ad by Andrea Poli
[GovWayCore, GovWayConsole]
In caso di Violazione Policy di RateLimiting con raggruppamento per Token Claim l'evento emesso non conteneva l'informazione puntuale sul valore del claim.
Nell'intervento è stata corretta anche una anomalia presente durante il salvataggio di una policy con criterio di raggruppamento per Token Claim 'subject'; l'impostazione del criterio di raggruppamento per token subject non consentiva di entrare nuovamente in modifica della policy e nei log si poteva riscontrare un errore simile al seguente: "Enum with value [TOKEN_ISSUER] not found"
 (commit: 35902e6)
The file was modified protocolli/trasparente/testsuite/karate/src/org/openspcoop2/core/protocolli/trasparente/testsuite/rate_limiting/raggruppamento/SoapTest.java (diff)
The file was modified tools/web_interfaces/control_station/src/org/openspcoop2/web/ctrlstat/servlet/config/ConfigurazioneHelper.java (diff)
The file was modified ChangeLog (diff)
The file was modified protocolli/trasparente/testsuite/karate/src/configurazioni-govway/trasparenteTestBundle.zip (diff)
The file was modified protocolli/trasparente/testsuite/karate/src/org/openspcoop2/core/protocolli/trasparente/testsuite/rate_limiting/raggruppamento/RestTest.java (diff)
The file was addedprotocolli/trasparente/testsuite/karate/src/org/openspcoop2/core/protocolli/trasparente/testsuite/rate_limiting/raggruppamento/EventiUtils.java
The file was modified core/src/org/openspcoop2/core/controllo_traffico/utils/PolicyUtilities.java (diff)