[Feature][Linkis] Security Work Order Repair - Spring Framework Related Dependency Version Upgrade
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 45/100
- Issue type
- Feature
- Clarity
- Mostly clear
- Activity status
- Stale
- Tech stack
- java, spring, spring-boot
- Domain
- build-system, security
Research direction
Locate the declarations for spring-framework.version, spring-security.version, and spring.boot.version in the project build configuration. Update them to 5.3.34, 5.7.11, and 2.7.12, then run the existing test suite and verify that the dependency upgrades remain compatible and stable.
Written by the indexing model from the issue text.
Description
Search before asking
- I had searched in the
https://github.com/apache/linkis/issuesand found no similar feature requirement.
Problem Description
Linkis使用的Spring框架相关依赖版本存在安全漏洞，需要升级Spring Framework、Spring Security和Spring Boot到安全版本。
Description
- spring-framework.version: 从5.3.27升级到5.3.34，修复已知安全漏洞
- spring-security.version: 从5.7.8升级到5.7.11，修复已知安全漏洞
- spring.boot.version: 从2.7.11升级到2.7.12，修复已知安全漏洞
- 确保升级后的依赖与现有代码兼容
Use case
确保Linkis系统在生产环境中的安全性，修复已知的Spring框架相关漏洞。
Solutions
- 升级spring-framework.version到5.3.34
- 升级spring-security.version到5.7.11
- 升级spring.boot.version到2.7.12
- 验证所有依赖升级后的兼容性和稳定性
- 进行全面的测试验证
Anything else
none
Are you willing to submit a PR?
- Yes I am willing to submit a PR!
- Dominant language
- Java
- Stars
- 3.4k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Getting set up
- No Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from apache/linkis
-
bug
Difficulty 1/5 Under an hour Newbie friendliness 86/100
-
Difficulty 4/5 3-5 days Newbie friendliness 38/100
-
Difficulty 4/5 3-5 days Newbie friendliness 55/100
-
Difficulty 4/5 3-5 days Newbie friendliness 28/100
-
Difficulty 3/5 1-2 days Newbie friendliness 55/100
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
grimmory-tools/grimmory#2850 · 1 comment ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 90/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
aoqia194/leaf-loader#19 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
apache/streampark#4521 ·
-
Update license yearOpen0 - Backlog 1 - Ready documentation good first issue help wanted
Difficulty 2/5 1-3 hours Newbie friendliness 78/100