[OpenNMS/opennms] 3d12cc: NMS-20177: Updated log4j version

OpenNMS Machine User via opennms-cvs <[email protected]>
Newsgroups gmane.network.opennms.cvs
Message-ID <OpenNMS/opennms/push/refs/heads/merge-foundation/foundation-2023-to-foundation-2024/[email protected]> 
  Branch: refs/heads/merge-foundation/foundation-2023-to-foundation-2024
  Home:   https://github.com/OpenNMS/opennms
  Commit: 3d12cc77248140bee93b4557fb1b931abf8d1d97
      https://github.com/OpenNMS/opennms/commit/3d12cc77248140bee93b4557fb1b931abf8d1d97
  Author: Christian Pape <[email protected]>
  Date:   2026-08-18 (Tue, 18 Aug 2026)

  Changed paths:
    M container/karaf/pom.xml
    M container/karaf/src/main/filtered-resources/etc/org.ops4j.pax.logging.cfg
    M container/karaf/src/main/filtered-resources/etc/overrides.properties
    M container/karaf/src/main/internal/features-processing.xml
    M container/shared/pom.xml
    M container/shared/src/main/filtered-resources/etc/overrides.properties
    M container/shared/src/main/internal/features-processing.xml
    M container/shared/src/main/resources/etc/org.ops4j.pax.logging.cfg
    M pom.xml

  Log Message:
  -----------
  NMS-20177: Updated log4j version


  Commit: 9e4f7c2ab69d636e6b2c1dd9d404e75edc61651d
      https://github.com/OpenNMS/opennms/commit/9e4f7c2ab69d636e6b2c1dd9d404e75edc61651d
  Author: Christian Pape <[email protected]>
  Date:   2026-08-18 (Tue, 18 Aug 2026)

  Changed paths:
    M .circleci/trivy-config/trivyignore

  Log Message:
  -----------
  NMS-20222: Added CVE-2025-67030 to trivyignore


  Commit: 3e84bd0c349e5d6832402c73c7167ee351b791ba
      https://github.com/OpenNMS/opennms/commit/3e84bd0c349e5d6832402c73c7167ee351b791ba
  Author: Christian Pape <[email protected]>
  Date:   2026-08-19 (Wed, 19 Aug 2026)

  Changed paths:
    M pom.xml

  Log Message:
  -----------
  NMS-20228: Using httpcore5 version 5.4.3


  Commit: 439698c963ad43fce1951026e0ac276a6d2b5544
      https://github.com/OpenNMS/opennms/commit/439698c963ad43fce1951026e0ac276a6d2b5544
  Author: Christian Pape <[email protected]>
  Date:   2026-08-19 (Wed, 19 Aug 2026)

  Changed paths:
    M .circleci/trivy-config/trivyignore

  Log Message:
  -----------
  NMS-20239: Added CVE-2025-14813 and CVE-2026-5598 to trivyignore


  Commit: c947aa613e7c3350c4c989d854abd4060faf8de5
      https://github.com/OpenNMS/opennms/commit/c947aa613e7c3350c4c989d854abd4060faf8de5
  Author: Christian Pape <[email protected]>
  Date:   2026-08-20 (Thu, 20 Aug 2026)

  Changed paths:
    M .circleci/trivy-config/trivyignore

  Log Message:
  -----------
  NMS-20223: Added CVEs to trivyignore


  Commit: 5347f805d05eb60308978fa259b2bee9c75852d2
      https://github.com/OpenNMS/opennms/commit/5347f805d05eb60308978fa259b2bee9c75852d2
  Author: Christian Pape <[email protected]>
  Date:   2026-08-20 (Thu, 20 Aug 2026)

  Changed paths:
    M container/features/pom.xml

  Log Message:
  -----------
  NMS-20237: Use our netty4 version


  Commit: a2fb99634f00ed70f9c4c61b655340c265984b25
      https://github.com/OpenNMS/opennms/commit/a2fb99634f00ed70f9c4c61b655340c265984b25
  Author: Christian Pape <[email protected]>
  Date:   2026-08-20 (Thu, 20 Aug 2026)

  Changed paths:
    M container/features/pom.xml
    M container/features/src/main/resources/features-core.xml
    M container/features/src/main/resources/features-experimental.xml
    M container/features/src/main/resources/features-sentinel.xml
    M container/features/src/main/resources/features.xml
    M container/karaf/pom.xml
    M container/karaf/src/main/filtered-resources/etc/overrides.properties
    M container/shared/pom.xml
    M container/shared/src/main/filtered-resources/etc/overrides.properties
    M container/shared/src/main/filtered-resources/etc/startup.properties
    M dependencies/jackson2/pom.xml
    M features/minion/core/features/src/main/resources/features.xml
    M features/minion/repository/src/assembly/repo.xml
    M features/sentinel/repository/src/assembly/repo.xml
    M opennms-full-assembly/pom.xml
    M opennms-full-assembly/src/assembly/components/osgi.xml
    M pom.xml
    M smoke-test/pom.xml

  Log Message:
  -----------
  NMS-20226: Bumped jackson version


  Commit: 51c9c1102324e54314b98f396f7cced014d7cba9
      https://github.com/OpenNMS/opennms/commit/51c9c1102324e54314b98f396f7cced014d7cba9
  Author: Morteza E <[email protected]>
  Date:   2026-08-20 (Thu, 20 Aug 2026)

  Changed paths:
    M opennms-container/common.mk
    M opennms-container/core/Dockerfile
    M opennms-container/minion/Dockerfile
    M opennms-container/sentinel/Dockerfile
    M smoke-test/src/main/java/org/opennms/smoketest/containers/MockCloudContainer.java

  Log Message:
  -----------
  Upgrade our base images


  Commit: fb9ba8bd48f27eedef18b3f0fbf0cfc8a8c22ca4
      https://github.com/OpenNMS/opennms/commit/fb9ba8bd48f27eedef18b3f0fbf0cfc8a8c22ca4
  Author: Chandra Gorantla <[email protected]>
  Date:   2026-08-21 (Fri, 21 Aug 2026)

  Changed paths:
    M docs/modules/reference/pages/performance-data-collection/collectors/xml.adoc
    M protocols/xml/src/main/java/org/opennms/protocols/xml/collector/AbstractXmlCollectionHandler.java
    M protocols/xml/src/test/java/org/opennms/protocols/xml/collector/AbstractXmlCollectionHandlerTest.java

  Log Message:
  -----------
  NMS-20206: Fix XXE in XML collector (#8782)

* NMS-20206: Fix XXE in XML collector

Disable external entity/DTD resolution in AbstractXmlCollectionHandler's
DocumentBuilderFactory and TransformerFactory so collected XML cannot read local
files or trigger out-of-band requests. Avoids disallow-doctype-decl to keep
pre-parse-html working. Adds regression tests.

* NMS-20206: Handle review comments

* NMS-20206: Handle some more review comments

Disable external entity/DTD resolution in the DocumentBuilder and, for the
xslt-source-file path, parse the stylesheet and collected source through a
hardened XMLReader (SAXSource) so XXE is blocked even under Xalan. Adds
regression tests.

* NMS-20206: Add some more protections

* NMS-20206: Update docs

* NMS-20206: Add ErrorListener


  Commit: 2e76241023e776c97ce55792d9a4ef3af725b6ba
      https://github.com/OpenNMS/opennms/commit/2e76241023e776c97ce55792d9a4ef3af725b6ba
  Author: CI/CD System <[email protected]>
  Date:   2026-08-21 (Fri, 21 Aug 2026)

  Changed paths:
    M docs/modules/reference/pages/performance-data-collection/collectors/xml.adoc
    M protocols/xml/src/main/java/org/opennms/protocols/xml/collector/AbstractXmlCollectionHandler.java
    M protocols/xml/src/test/java/org/opennms/protocols/xml/collector/AbstractXmlCollectionHandlerTest.java

  Log Message:
  -----------
  Merge remote-tracking branch 'origin/foundation-2023' into foundation-2024


Compare: https://github.com/OpenNMS/opennms/compare/9ab358b4d33a...2e76241023e7

To unsubscribe from these emails, change your notification settings at https://github.com/OpenNMS/opennms/settings/notifications


_______________________________________________
Please read the OpenNMS Mailing List FAQ:
http://www.opennms.org/wiki/index.php?page=MailingListFaq
opennms-cvs mailing list

To *unsubscribe* or change your subscription options, see the bottom of this page:
https://lists.sourceforge.net/lists/listinfo/opennms-cvs
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.