Merge requests · OSDU Software

Draft: Resolve spring, tomcat, and netty cve 2 of 6 checklist items completed

osdu/platform/consumption/geospatial!316 · created Nov 14, 2024 by Timothy Lobl M25 - Release 0.28
AWS MRDependencies Upgrade no-detached-pipeline
- Closed
updated Nov 14, 2024
resolve spring, tomcat, netty CVE 2 of 6 checklist items completed

osdu/platform/consumption/geospatial!315 · created Nov 13, 2024 by Timothy Lobl M25 - Release 0.28
AWS MRDependencies Upgrade Vulnerability Management no-detached-pipeline
- Merged
- Approved
updated Nov 19, 2024
Upgraded nimbus-jose-jwt version for azure 2 of 7 checklist items completed

osdu/platform/system/search-service!717 · created Nov 12, 2024 by Li Song M25 - Release 0.28
Azure MRDependencies Upgrade Vulnerability Management
- Merged
- Approved
updated Nov 13, 2024
Upgraded commons-io to 2.14.0 5 of 7 checklist items completed

osdu/platform/system/search-service!716 · created Nov 12, 2024 by Li Song M25 - Release 0.28
Common Code MRDependencies Upgrade Vulnerability Management
updated Nov 13, 2024
fix: various vuln dependencies update 0 of 5 checklist items completed

osdu/platform/consumption/geospatial!314 · created Nov 12, 2024 by Derek Zhang M25 - Release 0.28
MRDependencies Upgrade Vulnerability Management
- Merged
- Approved
updated Nov 12, 2024
Replaced derby dependency that had a critical vulnerability with hsqldb dependency

osdu/platform/system/reference/crs-conversion-service!461 · created Nov 08, 2024 by Alejandro Ventura M25 - Release 0.28
Common Code MRDependencies Upgrade Vulnerability Management
- Closed
- 26
updated Dec 09, 2024
fix: upgrade newman version to 6.2.1 6 of 18 checklist items completed

osdu/platform/domain-data-mgmt-services/seismic/seismic-dms-suite/seismic-store-service!1206 · created Nov 07, 2024 by Bruce Jin M25 - Release 0.28
AWS MRDependencies Upgrade
- Merged
- Approved
updated Nov 11, 2024
fix: upgrade newman version to 6.2.1 6 of 18 checklist items completed

osdu/platform/domain-data-mgmt-services/seismic/seismic-dms-suite/seismic-store-service!1205 · created Nov 07, 2024 by Timothy Lobl M25 - Release 0.28
AWS MRDependencies Upgrade
- Closed
- 0 of 2 Approvals
updated Nov 07, 2024
Cve fix for commons-io

osdu/platform/system/lib/cloud/aws/os-core-lib-aws!139 · created Nov 05, 2024 by Derek Zhang M25 - Release 0.28
AWS ImpactPatch MRDependencies Upgrade Vulnerability Management
- Merged
- Approved
updated Nov 05, 2024
fix: nimbus and commons-io cve 0 of 5 checklist items completed

osdu/platform/system/register!503 · created Nov 05, 2024 by Derek Zhang M25 - Release 0.28
MRDependencies Upgrade Vulnerability Management
- Merged
- Approved
updated Nov 05, 2024
fix: cve update 0 of 5 checklist items completed

osdu/platform/system/search-service!713 · created Nov 01, 2024 by Derek Zhang M25 - Release 0.28
MRDependencies Upgrade Vulnerability Management
- Merged
- Approved
updated Nov 04, 2024
Update Jakarta instead of Javax and os-core-common Spring-boot 3/Spring 6 version

osdu/platform/system/project-and-workflow!132 · created Nov 01, 2024 by Solomon Ayalew M25 - Release 0.28
AWS Common Code MRDependencies Upgrade
- Merged
- Approved
updated Nov 04, 2024
Draft: fix: commons-io cve update - TESTING ONLY 0 of 5 checklist items completed

osdu/platform/system/dataset!494 · created Nov 01, 2024 by Derek Zhang M25 - Release 0.28
AWS MRDependencies Upgrade Vulnerability Management
- 0 of 1 Approvals
updated Nov 01, 2024
Force correct version of spring web to fix CVE 2 of 6 checklist items completed

osdu/platform/consumption/geospatial!312 · created Oct 30, 2024 by Guillaume Caillet M25 - Release 0.28
MRDependencies Upgrade
- Merged
- Approved
updated Oct 31, 2024
fix: semver CVE 0 of 16 checklist items completed

osdu/platform/domain-data-mgmt-services/seismic/seismic-dms-suite/seismic-store-service!1203 · created Oct 30, 2024 by Derek Zhang M25 - Release 0.28
AWS MRDependencies Upgrade Vulnerability Management
- Merged
- 1
- Approved
updated Oct 31, 2024
fix: starlette/fastapi version update for CVE

osdu/platform/domain-data-mgmt-services/wellbore/wellbore-domain-services-worker!38 · created Oct 29, 2024 by Derek Zhang M25 - Release 0.28
MRDependencies Upgrade Vulnerability Management
- Merged
- 1
- Approved
updated Oct 30, 2024
fix: starlette/fastapi version update for CVE

osdu/platform/domain-data-mgmt-services/wellbore/wellbore-domain-services!884 · created Oct 29, 2024 by Derek Zhang M25 - Release 0.28
MRDependencies Upgrade Vulnerability Management
- Merged
- Approved
updated Oct 30, 2024
fix: starlette/fastapi version update for CVE

osdu/platform/security-and-compliance/policy!540 · created Oct 28, 2024 by Derek Zhang M25 - Release 0.28
Common Code MRDependencies Upgrade Vulnerability Management
- Merged
- Approved
updated Oct 30, 2024
Update dependencies, README, and pipelines 1 of 6 checklist items completed

osdu/platform/domain-data-mgmt-services/reservoir/open-etp-server!368 · created Oct 24, 2024 by William Lyles
MRDependencies Upgrade
- Merged
- Approved
updated Dec 06, 2024
fix: webmvc cve 0 of 10 checklist items completed

osdu/platform/system/project-and-workflow!127 · created Oct 24, 2024 by Derek Zhang M25 - Release 0.28
AWS Common Code MRDependencies Upgrade Vulnerability Management
- Merged
- Approved
updated Oct 25, 2024