From 9ea4f95658d7a7b44a418053cecc68cffc23cfdd Mon Sep 17 00:00:00 2001 From: LaunchDarklyReleaseBot Date: Tue, 13 Sep 2022 00:15:24 +0000 Subject: [PATCH] Releasing version 5.10.2 --- CHANGELOG.md | 4 ++++ gradle.properties | 2 +- src/main/java/com/launchdarkly/sdk/server/Version.java | 2 +- 3 files changed, 6 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index a195c2f07..748ec4778 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,6 +2,10 @@ All notable changes to the LaunchDarkly Java SDK will be documented in this file. This project adheres to [Semantic Versioning](http://semver.org). +## [5.10.2] - 2022-09-12 +### Fixed: +- Updated `snakeyaml` to v1.32 to address [CVE-2022-38752](https://nvd.nist.gov/vuln/detail/CVE-2022-38752). This vulnerability would only have affected applications that used the `FileData` feature with a YAML file, assuming an attacker had write access to the filesystem. + ## [5.10.1] - 2022-09-02 ### Fixed: - Updated `snakeyaml` dependency (used only if using `FileData` with YAML files) to v1.31 to address CVE-2022-25857 ([#275](https://github.com/launchdarkly/java-server-sdk/issues/275)) diff --git a/gradle.properties b/gradle.properties index c20b77706..3aee2027c 100644 --- a/gradle.properties +++ b/gradle.properties @@ -1,4 +1,4 @@ -version=5.10.1 +version=5.10.2 # The following empty ossrh properties are used by LaunchDarkly's internal integration testing framework # and should not be needed for typical development purposes (including by third-party developers). ossrhUsername= diff --git a/src/main/java/com/launchdarkly/sdk/server/Version.java b/src/main/java/com/launchdarkly/sdk/server/Version.java index 653464334..7a30db144 100644 --- a/src/main/java/com/launchdarkly/sdk/server/Version.java +++ b/src/main/java/com/launchdarkly/sdk/server/Version.java @@ -4,5 +4,5 @@ abstract class Version { private Version() {} // This constant is updated automatically by our Gradle script during a release, if the project version has changed - static final String SDK_VERSION = "5.10.1"; + static final String SDK_VERSION = "5.10.2"; }