You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2022/05/31 15:02:34 UTC
[GitHub] [pulsar] cbornet opened a new pull request, #15864: [fix][owasp] Suppress CVE-2016-1000027 detection in Spring dependencies
cbornet opened a new pull request, #15864:
URL: https://github.com/apache/pulsar/pull/15864
### Motivation
Fix OWASP scan as CVE-2016-1000027 is a false positive for Spring
See https://github.com/spring-projects/spring-framework/issues/24434\#issuecomment-1132113566
### Modifications
* Added CVE-2016-1000027 to OWASP suppressions fiile
* Removed old suppressions not used anymore
### Verifying this change
- [ ] Make sure that the change passes the CI checks.
This change is a trivial rework / code cleanup without any test coverage.
### Does this pull request potentially affect one of the following parts:
no
*If `yes` was chosen, please highlight the changes*
- Dependencies (does it add or upgrade a dependency): (yes / no)
- The public API: (yes / no)
- The schema: (yes / no / don't know)
- The default values of configurations: (yes / no)
- The wire protocol: (yes / no)
- The rest endpoints: (yes / no)
- The admin cli options: (yes / no)
- Anything that affects deployment: (yes / no / don't know)
### Documentation
Check the box below or label this PR directly.
Need to update docs?
- [ ] `doc-required`
(Your PR needs to update docs and you will update later)
- [x] `doc-not-needed`
fix
- [ ] `doc`
(Your PR contains doc changes)
- [ ] `doc-complete`
(Docs have been already added)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] cbornet commented on pull request #15864: [fix][owasp] Suppress CVE-2016-1000027 detection in Spring dependencies
Posted by GitBox <gi...@apache.org>.
cbornet commented on PR #15864:
URL: https://github.com/apache/pulsar/pull/15864#issuecomment-1142756835
/pulsarbot rerun-failure-checks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] Shoothzj merged pull request #15864: [fix][owasp] Suppress CVE-2016-1000027 detection in Spring dependencies
Posted by GitBox <gi...@apache.org>.
Shoothzj merged PR #15864:
URL: https://github.com/apache/pulsar/pull/15864
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org