You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@phoenix.apache.org by "kokosing (via GitHub)" <gi...@apache.org> on 2024/09/03 12:34:22 UTC
[PR] Exclude libraries with CVEs from phoenix-client-embedded" [phoenix]
kokosing opened a new pull request, #1970:
URL: https://github.com/apache/phoenix/pull/1970
(no comment)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@phoenix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Exclude libraries with CVEs from phoenix-client-embedded [phoenix]
Posted by "kokosing (via GitHub)" <gi...@apache.org>.
kokosing commented on PR #1970:
URL: https://github.com/apache/phoenix/pull/1970#issuecomment-2326410987
FYI @stoty @virajjasani
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@phoenix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Exclude libraries with CVEs from phoenix-client-embedded [phoenix]
Posted by "virajjasani (via GitHub)" <gi...@apache.org>.
virajjasani commented on PR #1970:
URL: https://github.com/apache/phoenix/pull/1970#issuecomment-2332061555
Do we know if CVEs of both of these dependencies have been resolved with some recently released version of Hadoop?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@phoenix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Exclude libraries with CVEs from phoenix-client-embedded [phoenix]
Posted by "stoty (via GitHub)" <gi...@apache.org>.
stoty commented on PR #1970:
URL: https://github.com/apache/phoenix/pull/1970#issuecomment-2328714385
I have opened a [DISCUSS] thread on dev@p.a.o. on how to handle transitive dependecy CVEs.
Please join the discussion.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@phoenix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org