You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2022/01/25 02:06:07 UTC
[GitHub] [pulsar] dlg99 opened a new pull request #13928: Upgraded debezium to 1.7.2 (+ fixed CVE-2021-20328, + suppressed OWASP misdetections)
dlg99 opened a new pull request #13928:
URL: https://github.com/apache/pulsar/pull/13928
Upgraded debezium to 1.7.2 (+ fixed CVE-2021-20328, + suppressed OWASP misdetections)
### Motivation
Upgraded debezium mostly to pick up perf fix https://issues.redhat.com/browse/DBZ-4309
`mvn clean install verify -Powasp-dependency-check -DskipTests -pl '!pulsar-sql,!distribution,!tiered-storage/file-system,!pulsar-io/flume,!pulsar-io/hbase,!pulsar-io/hdfs2,!pulsar-io/hdfs3,!pulsar-io/docs'` reported CVEs in debezium connectors, most are misdetected.
### Modifications
Upgraded debezium.
CVE-2021-20328 from mongo lib fixed by forcing newer version.
Updated suppressions.
### Verifying this change
- [ ] Make sure that the change passes the CI checks.
This change is already covered by existing tests
### Does this pull request potentially affect one of the following parts:
*If `yes` was chosen, please highlight the changes*
- Dependencies (does it add or upgrade a dependency): *YES*
- The public API: (yes / no)
- The schema: (yes / no / don't know)
- The default values of configurations: (yes / no)
- The wire protocol: (yes / no)
- The rest endpoints: (yes / no)
- The admin cli options: (yes / no)
- Anything that affects deployment: (yes / no / don't know)
### Documentation
Check the box below or label this PR directly (if you have committer privilege).
Need to update docs?
- [ ] `doc-required`
(If you need help on updating docs, create a doc issue)
- [x] `no-need-doc`
(Please explain why)
- [ ] `doc`
(If this PR contains doc changes)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] dlg99 commented on pull request #13928: Upgraded debezium to 1.7.2 (+ fixed CVE-2021-20328, + suppressed OWASP misdetections)
Posted by GitBox <gi...@apache.org>.
dlg99 commented on pull request #13928:
URL: https://github.com/apache/pulsar/pull/13928#issuecomment-1020774511
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] dlg99 commented on pull request #13928: Upgraded debezium to 1.7.2 (+ fixed CVE-2021-20328, + suppressed OWASP misdetections)
Posted by GitBox <gi...@apache.org>.
dlg99 commented on pull request #13928:
URL: https://github.com/apache/pulsar/pull/13928#issuecomment-1020842086
/pulsarbot run-failure-checks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] dlg99 commented on pull request #13928: Upgraded debezium to 1.7.2 (+ fixed CVE-2021-20328, + suppressed OWASP misdetections)
Posted by GitBox <gi...@apache.org>.
dlg99 commented on pull request #13928:
URL: https://github.com/apache/pulsar/pull/13928#issuecomment-1022459154
/pulsarbot run-failure-checks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] dlg99 commented on pull request #13928: Upgraded debezium to 1.7.2 (+ fixed CVE-2021-20328, + suppressed OWASP misdetections)
Posted by GitBox <gi...@apache.org>.
dlg99 commented on pull request #13928:
URL: https://github.com/apache/pulsar/pull/13928#issuecomment-1020774511
/pulsarbot run-failure-checks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] dlg99 commented on pull request #13928: Upgraded debezium to 1.7.2 (+ fixed CVE-2021-20328, + suppressed OWASP misdetections)
Posted by GitBox <gi...@apache.org>.
dlg99 commented on pull request #13928:
URL: https://github.com/apache/pulsar/pull/13928#issuecomment-1021306386
/pulsarbot run-failure-checks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] lhotari merged pull request #13928: Upgraded debezium to 1.7.2 (+ fixed CVE-2021-20328, + suppressed OWASP misdetections)
Posted by GitBox <gi...@apache.org>.
lhotari merged pull request #13928:
URL: https://github.com/apache/pulsar/pull/13928
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org