UNCLASSIFIED - NO CUI

chore(findings): opensource/gradle/gradle-jre11

Summary

opensource/gradle/gradle-jre11 has 4 new findings discovered during continuous monitoring.

id source package
GHSA-7hfm-57qf-j43q anchore_cve commons-compress-1.20
GHSA-crv7-7245-f45f anchore_cve commons-compress-1.20
GHSA-mc84-pj99-q6hh anchore_cve commons-compress-1.20
GHSA-xqfj-vm6h-2x34 anchore_cve commons-compress-1.20

More information can be found in the failed pipeline located here: https://repo1.dso.mil/dsop/opensource/gradle/gradle-jre11/-/jobs/5627263

Definition of Done

Justifications:

  • All findings have been justified
  • Justifications have been provided to the container hardening team

Approval Process:

  • Findings Approver has reviewed and approved all justifications
  • Approval request has been sent to Authorizing Official
  • Approval request has been processed by Authorizing Official
Edited by Al Fontaine