You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2021/04/21 05:13:25 UTC

[GitHub] [pulsar] lhotari opened a new pull request #10296: Downgrade vertx to 3.5.4

lhotari opened a new pull request #10296:
URL: https://github.com/apache/pulsar/pull/10296


   Fixes #10295
   
   ### Motivation
   
   - vertx 3.9.7 isn't compatible with Netty 4.1.63.Final
   
   ### Modifications
   
   - downgrade vertx from 3.9.7 to 3.5.4 
     - 3.5.4 fixes CVE-2018-12541, but contains  [CVE-2019-17640](https://nvd.nist.gov/vuln/detail/CVE-2019-17640)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [pulsar] aahmed-se merged pull request #10296: Downgrade vertx to 3.5.4

Posted by GitBox <gi...@apache.org>.
aahmed-se merged pull request #10296:
URL: https://github.com/apache/pulsar/pull/10296


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [pulsar] eolivelli commented on pull request #10296: Downgrade vertx to 3.5.4

Posted by GitBox <gi...@apache.org>.
eolivelli commented on pull request #10296:
URL: https://github.com/apache/pulsar/pull/10296#issuecomment-823863790


   `vertx 3.9.7 isn't compatible with Netty 4.1.63.Final`
   is there any issue on the vertx issue tracker ? if not, can we open one please?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [pulsar] lhotari commented on pull request #10296: Downgrade vertx to 3.5.4

Posted by GitBox <gi...@apache.org>.
lhotari commented on pull request #10296:
URL: https://github.com/apache/pulsar/pull/10296#issuecomment-823942370


   /pulsarbot run-failure-checks


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [pulsar] lhotari commented on pull request #10296: Downgrade vertx to 3.5.4

Posted by GitBox <gi...@apache.org>.
lhotari commented on pull request #10296:
URL: https://github.com/apache/pulsar/pull/10296#issuecomment-823858872


   /pulsarbot run-failure-checks


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



[GitHub] [pulsar] eolivelli commented on pull request #10296: Downgrade vertx to 3.5.4

Posted by GitBox <gi...@apache.org>.
eolivelli commented on pull request #10296:
URL: https://github.com/apache/pulsar/pull/10296#issuecomment-823864907


   we should run the Bookie HTTP Endpoint with Jetty and drop Vertx at all
   Now there is support for using any Java Web Container
   https://github.com/apache/bookkeeper/issues/2388


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org