You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by "zhaoyuanTian123 (via GitHub)" <gi...@apache.org> on 2026/03/23 08:11:30 UTC
[I] Request for release timeline of Pulsar 4.0.2 (fix for CVE-2024-53990) [pulsar]
zhaoyuanTian123 opened a new issue, #25387:
URL: https://github.com/apache/pulsar/issues/25387
It has been documented that Pulsar 4.0.2 will include a fix for CVE-2024-53990. We are requesting a clear expected release date for this version to plan our security updates accordingly
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Request for release timeline of Pulsar 4.0.2 (fix for CVE-2024-53990) [pulsar]
Posted by "lhotari (via GitHub)" <gi...@apache.org>.
lhotari closed issue #25387: Request for release timeline of Pulsar 4.0.2 (fix for CVE-2024-53990)
URL: https://github.com/apache/pulsar/issues/25387
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Request for release timeline of Pulsar 4.0.2 (fix for CVE-2024-53990) [pulsar]
Posted by "lhotari (via GitHub)" <gi...@apache.org>.
lhotari commented on issue #25387:
URL: https://github.com/apache/pulsar/issues/25387#issuecomment-4109290910
It has been fixed by https://github.com/apache/pulsar/pull/23732 by upgrading to asynchttp client 2.12.4. You can see in https://github.com/advisories/GHSA-mfj5-cf8g-g2fv that 2.14.4 is a patched version. It seems that some security companies haven't accepted the fix. #25023 is pending to address that.
We don't have a specific date when that is released.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Request for release timeline of Pulsar 4.0.2 (fix for CVE-2024-53990) [pulsar]
Posted by "lhotari (via GitHub)" <gi...@apache.org>.
lhotari commented on issue #25387:
URL: https://github.com/apache/pulsar/issues/25387#issuecomment-4118932273
Newest Pulsar release is 4.0.9 so the issue title doesn't make sense. Closing.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org