[ https://issues.apache.org/jira/browse/KNOX-3078?focusedWorklogId=952333&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-952333 ]
ASF GitHub Bot logged work on KNOX-3078: ---------------------------------------- Author: ASF GitHub Bot Created on: 14/Jan/25 20:04 Start Date: 14/Jan/25 20:04 Worklog Time Spent: 10m Work Description: pzampino commented on PR #974: URL: https://github.com/apache/knox/pull/974#issuecomment-2591000690 @dependabot rebase Issue Time Tracking ------------------- Worklog Id: (was: 952333) Time Spent: 20m (was: 10m) > Bumpup protobuf to 3.25.5 > ------------------------- > > Key: KNOX-3078 > URL: https://issues.apache.org/jira/browse/KNOX-3078 > Project: Apache Knox > Issue Type: Improvement > Affects Versions: 1.6.0 > Reporter: Basapuram Kumar > Priority: Major > Time Spent: 20m > Remaining Estimate: 0h > > Upgrade protobuf-java to 3.25.5 due to cve-2024-7254. > > CVE-2024-7254 references > [https://nvd.nist.gov/vuln/detail/cve-2024-7254] > [https://github.com/advisories/GHSA-735f-pc8j-v9w8] > -- This message was sent by Atlassian Jira (v8.20.10#820010)