You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by "lhotari (via GitHub)" <gi...@apache.org> on 2023/05/26 14:35:05 UTC
[GitHub] [pulsar] lhotari opened a new pull request, #20411: [fix][sec] Upgrade sqlite-jdbc to resolve CVE-2023-32697
lhotari opened a new pull request, #20411:
URL: https://github.com/apache/pulsar/pull/20411
### Motivation
```
Error: Failed to execute goal org.owasp:dependency-check-maven:8.1.2:aggregate (default) on project pulsar:
Error:
Error: One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0':
Error:
Error: sqlite-jdbc-3.36.0.3.jar: CVE-2023-32697(8.8)
```
### Modifications
Upgrade sqlite-jdbc
### Documentation
<!-- DO NOT REMOVE THIS SECTION. CHECK THE PROPER BOX ONLY. -->
- [ ] `doc` <!-- Your PR contains doc changes. -->
- [ ] `doc-required` <!-- Your PR changes impact docs and you will update later -->
- [x] `doc-not-needed` <!-- Your PR changes do not impact docs -->
- [ ] `doc-complete` <!-- Docs have been already added -->
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] tisonkun merged pull request #20411: [fix][sec] Upgrade sqlite-jdbc to resolve CVE-2023-32697
Posted by "tisonkun (via GitHub)" <gi...@apache.org>.
tisonkun merged PR #20411:
URL: https://github.com/apache/pulsar/pull/20411
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] codecov-commenter commented on pull request #20411: [fix][sec] Upgrade sqlite-jdbc to resolve CVE-2023-32697
Posted by "codecov-commenter (via GitHub)" <gi...@apache.org>.
codecov-commenter commented on PR #20411:
URL: https://github.com/apache/pulsar/pull/20411#issuecomment-1564715094
## [Codecov](https://app.codecov.io/gh/apache/pulsar/pull/20411?src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) Report
> Merging [#20411](https://app.codecov.io/gh/apache/pulsar/pull/20411?src=pr&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) (e5c526c) into [master](https://app.codecov.io/gh/apache/pulsar/commit/f0e97f45e082854015dddea965ab9fc7b4d07e9b?el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) (f0e97f4) will **increase** coverage by `0.41%`.
> The diff coverage is `n/a`.
[](https://app.codecov.io/gh/apache/pulsar/pull/20411?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)
```diff
@@ Coverage Diff @@
## master #20411 +/- ##
============================================
+ Coverage 72.45% 72.86% +0.41%
+ Complexity 31898 31770 -128
============================================
Files 1852 1864 +12
Lines 138227 138416 +189
Branches 15175 15188 +13
============================================
+ Hits 100150 100858 +708
+ Misses 30098 29538 -560
- Partials 7979 8020 +41
```
| Flag | Coverage Δ | |
|---|---|---|
| inttests | `24.15% <ø> (-0.02%)` | :arrow_down: |
| systests | `24.90% <ø> (?)` | |
| unittests | `72.16% <ø> (-0.05%)` | :arrow_down: |
Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache#carryforward-flags-in-the-pull-request-comment) to find out more.
[see 159 files with indirect coverage changes](https://app.codecov.io/gh/apache/pulsar/pull/20411/indirect-changes?src=pr&el=tree-more&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] nodece commented on pull request #20411: [fix][sec] Upgrade sqlite-jdbc to resolve CVE-2023-32697
Posted by "nodece (via GitHub)" <gi...@apache.org>.
nodece commented on PR #20411:
URL: https://github.com/apache/pulsar/pull/20411#issuecomment-1564612221
/pulsarbot rerun-failure-checks
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org