Skip to content

Commit

Permalink
CHANGES: update for readability (review feedback)
Browse files Browse the repository at this point in the history
  • Loading branch information
tlvu committed Jul 12, 2024
1 parent faf6de5 commit 03f0577
Showing 1 changed file with 12 additions and 9 deletions.
21 changes: 12 additions & 9 deletions CHANGES.md
Original file line number Diff line number Diff line change
Expand Up @@ -19,27 +19,30 @@

- GeoServer: upgrade to 2.25.2 to fix vulnerabilities

See
https://nsfocusglobal.com/remote-code-execution-vulnerability-between-geoserver-and-geotools-cve-2024-36401-cve-2024-36404-notification/,
https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv,
https://github.com/geotools/geotools/security/advisories/GHSA-w3pj-wh35-fq8w
See:
* https://nsfocusglobal.com/remote-code-execution-vulnerability-between-geoserver-and-geotools-cve-2024-36401-cve-2024-36404-notification/
* https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv
* https://github.com/geotools/geotools/security/advisories/GHSA-w3pj-wh35-fq8w

This change will upgrade to GeoServer 2.25.2 and GeoTools 31.2 (the version of gt-complex.jar).
This change will upgrade to GeoServer 2.25.2 and GeoTools 31.2 (the version of `gt-complex.jar`).

```
```shell
$ docker exec -u 0 geoserver find / -iname '**gt-complex**'
/usr/local/tomcat/webapps/geoserver/WEB-INF/lib/gt-complex-31.2.jar
```

The previous version was GeoServer 2.22.2 and GeoTools 28.2.

```
```shell
$ docker exec -u 0 geoserver find / -iname '**gt-complex**'
/usr/local/tomcat/webapps/geoserver/WEB-INF/lib/gt-complex-28.2.jar
```

Also enable OGC-API plugins https://docs.geoserver.org/stable/en/user/community/ogc-api/features/index.html
so we can slowly transition from the WPS plugin.
Also enable
* OGC-API plugins https://docs.geoserver.org/stable/en/user/community/ogc-api/features/index.html
so we can slowly transition from the WPS plugin.
* STAC Datastore plugin https://docs.geoserver.org/latest/en/user/community/stac-datastore/index.html
so we can test integration with our STAC component.


[2.5.1](https://github.com/bird-house/birdhouse-deploy/tree/2.5.1) (2024-07-10)
Expand Down

0 comments on commit 03f0577

Please sign in to comment.