You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@zeppelin.apache.org by GitBox <gi...@apache.org> on 2022/10/14 03:21:32 UTC

[GitHub] [zeppelin] denglunfuren opened a new pull request, #4488: fix(sec): upgrade org.jetbrains.kotlin:kotlin-stdlib to 1.6.0

denglunfuren opened a new pull request, #4488:
URL: https://github.com/apache/zeppelin/pull/4488

   ### What happened？
   There are 2 security vulnerabilities found in org.jetbrains.kotlin:kotlin-stdlib 1.3.50
   - [CVE-2022-24329](https://www.oscs1024.com/hd/CVE-2022-24329)
   - [CVE-2020-29582](https://www.oscs1024.com/hd/CVE-2020-29582)
   
   
   ### What did I do？
   Upgrade org.jetbrains.kotlin:kotlin-stdlib from 1.3.50 to 1.6.0 for vulnerability fix
   
   ### What did you expect to happen？
   Ideally, no insecure libs should be used.
   
   ### The specification of the pull request
   [PR Specification](https://www.oscs1024.com/docs/pr-specification/) from OSCS


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@zeppelin.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] fix(sec): upgrade org.jetbrains.kotlin:kotlin-stdlib to 1.6.0 [zeppelin]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.

github-actions[bot] commented on PR #4488:
URL: https://github.com/apache/zeppelin/pull/4488#issuecomment-3199012008

   This pull request has been automatically closed due to prolonged inactivity (over one year without updates).   If you feel this was done in error or would like to continue the discussion, feel free to reopen it. Thank you for your contributions!


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: reviews-unsubscribe@zeppelin.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] fix(sec): upgrade org.jetbrains.kotlin:kotlin-stdlib to 1.6.0 [zeppelin]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.

github-actions[bot] commented on PR #4488:
URL: https://github.com/apache/zeppelin/pull/4488#issuecomment-3076524780

   This pull request has been inactive for over a year.   If no further activity occurs within the next 30 days, it will be automatically closed.   If you believe this PR is still relevant, please feel free to leave a comment or make an update. Thank you!


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: reviews-unsubscribe@zeppelin.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] fix(sec): upgrade org.jetbrains.kotlin:kotlin-stdlib to 1.6.0 [zeppelin]

Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.

github-actions[bot] closed pull request #4488: fix(sec): upgrade org.jetbrains.kotlin:kotlin-stdlib to 1.6.0
URL: https://github.com/apache/zeppelin/pull/4488


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: reviews-unsubscribe@zeppelin.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org