[SO-3642] PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR ISTANBUL - ONAP JIRA

XML

Word

Printable

Update the vulnerable direct dependencies in code base following the recommendations of SECCOM documented in Istanbul SO.

Identify resource constraints to SECCOM by 17 June (M2).

Submit a LF Ticket for access to the Security Vulnerabilities space.

blocks

REQ-863 PACKAGES UPGRADES IN DIRECT DEPENDENCIES FOR ISTANBUL

1.	Fix the nexus IQ issues of the so-adapters-so-etsi-sol003-adapter	Closed	Shashikanth VH
2.	so-so-admin-cockpit issues on the nexus IQ	Closed	Shashikanth VH
3.	so-so-etsi-nfvo nexus IQ issue resolution	Closed	Waqas Ikram
4.	so-libs Nexus IQ issues	Closed	Shashikanth VH
5.	SO Nexus IQ issue resolution	Closed	Shashikanth VH

#	Subject	Branch	Project	Status	CR	V
123144,2	fixing vulnerabilities for tomcat catalina	master	so	Status: MERGED	+2	+1
123165,2	Fixing vulnerabilities	master	so/so-etsi-nfvo	Status: MERGED	+2	+1
123192,1	Fixing vulnerabilities	master	so/adapters/so-etsi-sol003-adapter	Status: MERGED	+2	+1
123231,1	Changing SOL003 dependency version	master	so	Status: MERGED	+2	+1
123232,1	Changing SOL003 dependency version	master	so/so-etsi-nfvo	Status: MERGED	+2	+1
123299,1	Fixing vulnerabilities	master	so/so-admin-cockpit	Status: MERGED	+2	+1
124327,1	Release the so-etsi-sol003-adapter for Istanbul	master	so/adapters/so-etsi-sol003-adapter	Status: MERGED	+2	+1
124328,1	Released the so-etsi-nfvo-adapter for Istanbul	master	so/so-etsi-nfvo	Status: MERGED	+2	+1