You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@pekko.apache.org by "slandelle (via GitHub)" <gi...@apache.org> on 2023/12/18 20:57:42 UTC

[D] Is Pekko affected by CVE-2023-45865? [incubator-pekko]

GitHub user slandelle created a discussion: Is Pekko affected by CVE-2023-45865?

Hi,

Sorry if here is not the right place to ask. If not, please guide me.

[CVE-2023-45865](https://akka.io/security/akka-cve-2023-45865.html) hits all Akka versions up to 2.8.5 included, so I guess Pekko is affected as well.

Was the Pekko project alerted too? Is there a planned fix?

Best regards,

Stéphane

GitHub link: https://github.com/apache/incubator-pekko/discussions/851

----
This is an automatically sent email for notifications@pekko.apache.org.
To unsubscribe, please send an email to: notifications-unsubscribe@pekko.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@pekko.apache.org
For additional commands, e-mail: notifications-help@pekko.apache.org


Re: [D] Is Pekko affected by CVE-2023-45865? [incubator-pekko]

Posted by "pjfanning (via GitHub)" <gi...@apache.org>.
GitHub user pjfanning added a comment to the discussion: Is Pekko affected by CVE-2023-45865?

see https://github.com/apache/incubator-pekko/pull/771 - included in pekko 1.0.2 release

GitHub link: https://github.com/apache/incubator-pekko/discussions/851#discussioncomment-7890821

----
This is an automatically sent email for notifications@pekko.apache.org.
To unsubscribe, please send an email to: notifications-unsubscribe@pekko.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@pekko.apache.org
For additional commands, e-mail: notifications-help@pekko.apache.org


Re: [D] Is Pekko affected by CVE-2023-45865? [incubator-pekko]

Posted by "slandelle (via GitHub)" <gi...@apache.org>.
GitHub user slandelle closed the discussion with a comment: Is Pekko affected by CVE-2023-45865?

Oh, thanks a lot.
I'm very sorry for the noise.

GitHub link: https://github.com/apache/incubator-pekko/discussions/851#discussioncomment-7890858

----
This is an automatically sent email for notifications@pekko.apache.org.
To unsubscribe, please send an email to: notifications-unsubscribe@pekko.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@pekko.apache.org
For additional commands, e-mail: notifications-help@pekko.apache.org


Re: [D] Is Pekko affected by CVE-2023-45865? [incubator-pekko]

Posted by "slandelle (via GitHub)" <gi...@apache.org>.
GitHub user slandelle closed a discussion: Is Pekko affected by CVE-2023-45865?

Hi,

Sorry if here is not the right place to ask. If not, please guide me.

[CVE-2023-45865](https://akka.io/security/akka-cve-2023-45865.html) hits all Akka versions up to 2.8.5 included, so I guess Pekko is affected as well.

Was the Pekko project alerted too? Is there a planned fix?

Best regards,

Stéphane

GitHub link: https://github.com/apache/incubator-pekko/discussions/851

----
This is an automatically sent email for notifications@pekko.apache.org.
To unsubscribe, please send an email to: notifications-unsubscribe@pekko.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@pekko.apache.org
For additional commands, e-mail: notifications-help@pekko.apache.org