Skip to content

MINOR: Update apacheds to 2.0.0.AM27 #19565

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: trunk
Choose a base branch
from

Conversation

tinaselenge
Copy link
Contributor

Dependencies such as api-ldap-client-api and mina-core used by the current version of apacheds have several critical CVEs: CVE-2018-1337, CVE-2024-52046 and CVE-2019-0231.

Dependencies such as api-ldap-client-api and mina-core used by the current version of
apacheds have several critical CVEs: CVE-2018-1337, CVE-2024-52046 and CVE-2019-0231.
@github-actions github-actions bot added triage PRs from the community build Gradle build or GitHub Actions small Small PRs labels Apr 25, 2025
@showuon
Copy link
Member

showuon commented Apr 28, 2025

Re-running CI.

@github-actions github-actions bot removed the triage PRs from the community label Apr 28, 2025
@showuon
Copy link
Member

showuon commented Apr 28, 2025

@tinaselenge , could you take a look at the error:

* What went wrong:
Execution failed for task ':core:compileTestScala'.
> Could not resolve all files for configuration ':core:testCompileClasspath'.
gradle/actions: Writing build results to /home/runner/work/_temp/.gradle-actions/build-results/__run_2-1745800197123.json
   > Could not find org.apache.directory.server:apacheds-protocol-kerberos:2.0.0.AM27.
     Searched in the following locations:
       - https://repo.maven.apache.org/maven2/org/apache/directory/server/apacheds-protocol-kerberos/2.0.0.AM27/apacheds-protocol-kerberos-2.0.0.AM27.pom
     Required by:
         project :core

@tinaselenge
Copy link
Contributor Author

Thanks @showuon. I had a look and apacheds-protocol-kerberos seems to be the only apacheds library that doesn't have 2.0.0.AM27 release. It has 2.0.0.AM26 (from 2020) so we could set apacheds to 2.0.0.AM26 instead or have a separate variable to set the version of apacheds-protocol-kerberos and all other apacheds libraries are bumped to 2.0.0.AM27 . Wdyt?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
build Gradle build or GitHub Actions ci-approved small Small PRs
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants