[SLIDER-1091] Upgrade test-time dependency on Groovy to 2.4.4

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: Slider 0.90.2
• Fix Version/s: Slider 0.90.2
• Component/s: build, security, test
• Assignee: Steve Loughran
• Reporter: Steve Loughran
• Created: 24/Feb/16 09:46
• Updated: 24/Feb/16 16:49
• Resolved: 24/Feb/16 16:49

Description

CVE-2015-3253 means that the groovy version we use for tests must be considered insecure.

There is no vulnerability in Slider release: We don't distribute groovy. Nor we do any object serialization, which is the vulnerability. However, we should upgrade anyway

Issue Links

• duplicates: SLIDER-960 switch to groovy 2.4.4 (the ASF edition)