You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@yunikorn.apache.org by "Weiwei Yang (Jira)" <ji...@apache.org> on 2021/06/08 22:56:00 UTC

[jira] [Created] (YUNIKORN-699) replace the UUID library in the shim repo

Weiwei Yang created YUNIKORN-699:
------------------------------------

             Summary: replace the UUID library in the shim repo
                 Key: YUNIKORN-699
                 URL: https://issues.apache.org/jira/browse/YUNIKORN-699
             Project: Apache YuniKorn
          Issue Type: Bug
          Components: core - scheduler
            Reporter: Wilfred Spiegelenburg
            Assignee: Wilfred Spiegelenburg
             Fix For: 0.11


The library we use github.com/satori/go.uuid has a CVE open against it and has had for a long time. Maintenance of the code is also questionable.
We should move to github.com/google/uuid v1.2.0. 
That would be a simple replacement of {{uuid.NewV4().String()}} with {{uuid.NewString()}}

This latest version provides a {{uuid.NewString()}} method if we stick with an older version it would become {{uuid.New().String()}}





--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@yunikorn.apache.org
For additional commands, e-mail: dev-help@yunikorn.apache.org