You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by "BewareMyPower (via GitHub)" <gi...@apache.org> on 2024/01/15 03:50:27 UTC

[PR] [improve][ci] Upgrade pulsar-client-python to 3.4.0 to avoid CVE-2023-1428 [pulsar]

BewareMyPower opened a new pull request, #21899:
URL: https://github.com/apache/pulsar/pull/21899

   ### Motivation
   
   Currently pulsar-client-python 3.2.0 is used for Python Functions in Pulsar images, which suffers the CVE-2023-1428 due to the old `grpc.io` dependency.
   
   ### Modifications
   
   Upgrade the depended pulsar-client-python version to include https://github.com/apache/pulsar-client-python/pull/174
   
   ### Documentation
   
   <!-- DO NOT REMOVE THIS SECTION. CHECK THE PROPER BOX ONLY. -->
   
   - [ ] `doc` <!-- Your PR contains doc changes. -->
   - [ ] `doc-required` <!-- Your PR changes impact docs and you will update later -->
   - [x] `doc-not-needed` <!-- Your PR changes do not impact docs -->
   - [ ] `doc-complete` <!-- Docs have been already added -->
   
   ### Matching PR in forked repository
   
   PR in forked repository: 
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [improve][ci] Upgrade pulsar-client-python to 3.4.0 to avoid CVE-2023-1428 [pulsar]

Posted by "Technoboy- (via GitHub)" <gi...@apache.org>.
Technoboy- closed pull request #21899: [improve][ci] Upgrade pulsar-client-python to 3.4.0 to avoid CVE-2023-1428
URL: https://github.com/apache/pulsar/pull/21899


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [improve][ci] Upgrade pulsar-client-python to 3.4.0 to avoid CVE-2023-1428 [pulsar]

Posted by "Technoboy- (via GitHub)" <gi...@apache.org>.
Technoboy- merged PR #21899:
URL: https://github.com/apache/pulsar/pull/21899


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org