You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2022/03/22 14:25:00 UTC
[GitHub] [pulsar] nicoloboschi opened a new pull request #14802: [owasp] suppress debezium-connector-postgres CVE-2021-23214 false positive
nicoloboschi opened a new pull request #14802:
URL: https://github.com/apache/pulsar/pull/14802
### Motivation
debezium-connector-postgres is incorrectly targeted with CVE-2021-23214 and the owasp check fails.
It's a false positive since the CVE is for PostGre server.
https://nvd.nist.gov/vuln/detail/CVE-2021-23214
### Modifications
* Added the suppression
* Add OWASP GH check if a owasp file changes in the PR
- [x] `no-need-doc`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] nicoloboschi commented on pull request #14802: [owasp] suppress debezium-connector-postgres CVE-2021-23214 false positive
Posted by GitBox <gi...@apache.org>.
nicoloboschi commented on pull request #14802:
URL: https://github.com/apache/pulsar/pull/14802#issuecomment-1076512784
/pulsarbot rerun-failure-checks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] nicoloboschi commented on pull request #14802: [owasp] suppress debezium-connector-postgres CVE-2021-23214 false positive
Posted by GitBox <gi...@apache.org>.
nicoloboschi commented on pull request #14802:
URL: https://github.com/apache/pulsar/pull/14802#issuecomment-1077391006
/pulsarbot rerun-failure-checks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] nicoloboschi commented on pull request #14802: [owasp] suppress debezium-connector-postgres CVE-2021-23214 false positive
Posted by GitBox <gi...@apache.org>.
nicoloboschi commented on pull request #14802:
URL: https://github.com/apache/pulsar/pull/14802#issuecomment-1077712827
This pull is mergeable, the OWASP fails due to Jackson
https://github.com/apache/pulsar/pull/14794
@eolivelli @lhotari @dlg99 @codelipenghui PTAL
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] gaozhangmin commented on pull request #14802: [owasp] suppress debezium-connector-postgres CVE-2021-23214 false positive
Posted by GitBox <gi...@apache.org>.
gaozhangmin commented on pull request #14802:
URL: https://github.com/apache/pulsar/pull/14802#issuecomment-1077592129
+1, See https://github.com/apache/pulsar/runs/5596778789?check_suite_focus=true
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] dave2wave merged pull request #14802: [owasp] suppress debezium-connector-postgres CVE-2021-23214 false positive
Posted by GitBox <gi...@apache.org>.
dave2wave merged pull request #14802:
URL: https://github.com/apache/pulsar/pull/14802
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] nicoloboschi edited a comment on pull request #14802: [owasp] suppress debezium-connector-postgres CVE-2021-23214 false positive
Posted by GitBox <gi...@apache.org>.
nicoloboschi edited a comment on pull request #14802:
URL: https://github.com/apache/pulsar/pull/14802#issuecomment-1077712827
This pull is mergeable, the OWASP fails due to Jackson
https://github.com/apache/pulsar/pull/14794
@eolivelli @lhotari @dlg99 @codelipenghui PTAL
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org