https://bz.apache.org/bugzilla/show_bug.cgi?id=63776

            Bug ID: 63776
           Summary: Please update dependency of jackson to 2.9.10
           Product: JMeter
           Version: Nightly (Please specify date)
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Main
          Assignee: [email protected]
          Reporter: [email protected]
  Target Milestone: JMETER_5.2

Hello,

the currently used version of Jackson-databind contains an security
vulnerability (again). This one is fixed at 2.9.10 (CVE-2019-14540)
https://github.com/FasterXML/jackson-databind/issues/2410

I try to create a PR but failed. Maybe someone can help...

I did all steps as described inside CONTRIBUTING.md.

I checked out the code from github. Opened build.gradle.kts inside Intellij
(2019.2.3). Here i was not asked about poitn 2 "Create separate module per
source set".

Than later on running './gradlew check' fails. It seems to be a locale problem.
Two tests fail with the following:

org.apache.jmeter.assertions.gui.AssertionGuiSpec > Modification of
ResponseAssertion by GUI has no unexpected behaviour FAILED
    Condition not satisfied:

    element.getName() == "Response Assertion"
    |       |         |
    |       |         false
    |       |         15 differences (21% similarity)
    |       |         (V)e(r)s(ichert)e A(ntwo)rt(---)
    |       |         (R)e(-)s(pons--)e A(sse-)rt(ion)
    |       Versicherte Antwort
    <org.apache.jmeter.assertions.ResponseAssertion@c074e66
propMap=[Asserion.test_strings:[], TestElement.name:Versicherte Antwort,
TestElement.gui_class:org.apache.jmeter.
...

What should i change to resolve these?


Another thing - Felix Schumacher created a fix last time (e5a2fe13 from 15.Aug)
where i reported a similiar problem. He change version numbers inside three
files, but i do not find the checksum.propoerties file in my project. Was it
removed or gets automatically recreated somehow? I see a lot of changes going
on to the build system right now...

Thanks,
Stefan Seide

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to