New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

OpenDCS Vulnerability Remediation #199

Open

1 of 3 tasks

dennisgsmith opened this issue Sep 20, 2024 · 0 comments

Contributor

dennisgsmith commented Sep 20, 2024 •

edited

Loading

instrumentation-dcs uses old JAR archive that needs to be recompiled to patch 3 CRITICAL vulnerabilities.

Patching is non-trivial since only JAR archive of code exists in vcs (source code was not uploaded).

Current plan of action:

Use Java disassembler to recreate source code
Create Dockerfile to automatically from source in future deployments
Push to environments and test

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment