-
Bug
-
Resolution: Done
-
Medium
-
Frankfurt Release
-
SDNC Fr Sp2:11/23-12/13
Please fix the following findings:
- hardcoded versions:
- features/sdnr/wt/devicemanager/provider - https://codecloud.web.att.com/projects/ST_CCSDK/repos/features/browse/sdnr/wt/devicemanager/provider/pom.xml#176 -> update jackson-databind2.6.3 to 2.9.9.2 as requested by CSO
- components that need updated 3rd party libs:
- features/sdnr/wt/devicemanager/provider
- 2.0 - https://codecloud.web.att.com/projects/ST_CCSDK/repos/features/browse/sdnr/wt/devicemanager/provider/pom.xml#129 - update 2.2.0 -> v2.2.3 (no vulnerabilities) or v7.3.2 (latest)
- features/sdnr/wt/websocketmanager2
- Netty Project4.1.30.Final - sdnr-wt-websocketmanager2-0.7.0-SNAPSHOT-repo.zip /system/io/netty/netty-all/4.1.30.Final/netty-all-4.1.30.Final.jar - coming from binding-parent