SAST failed after changing spring boot to 2.5.5
There is no way to follow the the course in 2024.
Section 6.
After changing spring boot from 2.4.3 to 2.5.5 I got the error below.
Top Priority (universal)
║ pkg:maven/ch.qos.logback/logback-core@1.2.6 │ CVE-2021-42550 │ 1.2.13
║ pkg:maven/org.apache.logging.log4j/log4j-api@2.14.1 │ CVE-2021-44228 │ 2.17.1
Once adding both dependencies in pom.xml
Unable to create live FilePath for devsecops-demo-main-63-7hkmn-vfkmr-tbs94; devsecops-demo-main-63-7hkmn-vfkmr-tbs94 was marked offline: Pod failed (Reason: Evicted, Message: The node was low on resource: memory. Threshold quantity: 100Mi, available: 81588Ki. Container maven was using 2327908Ki, request is 0, has larger consumption of memory. Container kaniko was using 212Ki, request is 0, has larger consumption of memory. Container docker-tools was using 664Ki, request is 0, has larger consumption of memory. Container licensefinder was using 4300Ki, request is 0, has larger consumption of memory. Container slscan was using 3200Ki, request is 0, has larger consumption of memory. Container trufflehog was using 672Ki, request is 0, has larger consumption of memory. )
After adding only logback I see
CVE-2016-1000027 │ org.springframework/spring-webmvc │ 5.3.31 │ 6.0.0 │ CRITICAL
there is a lot of work to make it work.
Can you update the course?
Comments
-
The exact same error happens after upgrading Spring Boot to version "3.2.3".
0 -
Hi @albertgoma
We are currently working on updating the course content and labs. A new version is expected to go live in the next 2 weeks or so.
Regards,
Flavia0 -
Thanks @fcioanca, I'm really looking forward to it: even though I managed to follow some of the next labs I keep finding some small problems. For example, in Lab 9 we're required to install Chef Inspec and now we must request a free tier license by providing personal data, including our phone number...
0
Categories
- All Categories
- 177 LFX Mentorship
- 177 LFX Mentorship: Linux Kernel
- 768 Linux Foundation IT Professional Programs
- 379 Cloud Engineer IT Professional Program
- 175 Advanced Cloud Engineer IT Professional Program
- 75 DevOps IT Professional Program - Discontinued
- 7 DevOps & GitOps IT Professional Program
- 101 Cloud Native Developer IT Professional Program
- 7.6K Training Courses & Learning Paths
- 4 AI & ML Training
- 1 Blockchain & Decentralized Identity Training
- 11 Cloud & Containers Training
- 1 Cybersecurity Training
- 2 DevOps & Site-Reliability Training
- 1 Linux Kernel Development Training
- 1 Networking Training
- 2 Open Source Best Practice Training
- 3 System Administration Training
- 1 System Engineering Training
- 1 Web & Application Development Training
- 796 Hardware
- 202 Drivers
- 68 I/O Devices
- 37 Monitors
- 95 Multimedia
- 173 Networking
- 91 Printers & Scanners
- 91 Storage
- 771 Linux Distributions
- 81 Debian
- 68 Fedora
- 23 Linux Mint
- 13 Mageia
- 24 openSUSE
- 151 Red Hat Enterprise
- 31 Slackware
- 13 SUSE Enterprise
- 356 Ubuntu
- 465 Linux System Administration
- 31 Cloud Computing
- 73 Command Line/Scripting
- Github systems admin projects
- 98 Linux Security
- 78 Network Management
- 101 System Management
- 46 Web Management
- 120 Mobile Computing
- 20 Android
- 85 Development
- 1.2K New to Linux
- 1K Getting Started with Linux
- 395 Off Topic
- 121 Introductions
- 30 Study Material
- 1K Programming and Development
- 310 Kernel Development
- 693 Software Development
- 1K Software
- 400 Applications
- 182 Command Line
- 5 Compiling/Installing
- 69 Games
- 318 Installation
- Archived
- 183 Small Talk
- 2 LFD140 Class Forum
- 1.4K LFS258 Class Forum
Upcoming Training
-
August 20, 2018
Kubernetes Administration (LFS458)
-
August 20, 2018
Linux System Administration (LFS301)
-
August 27, 2018
Open Source Virtualization (LFS462)
-
August 27, 2018
Linux Kernel Debugging and Security (LFD440)
