You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2022/10/12 15:18:31 UTC
[GitHub] [pulsar] nicoloboschi opened a new pull request, #18022: [fix][sec] File tiered storage: upgrade jettison to get rid of CVE-2022-40149
nicoloboschi opened a new pull request, #18022:
URL: https://github.com/apache/pulsar/pull/18022
### Motivation
In the file tiered storage the hadoop dependency brings in a vulnerable version of jettison ([CVE-2022-40149](https://nvd.nist.gov/vuln/detail/CVE-2022-40149)).
It has been already fixed in the nightly version without any code change (https://github.com/apache/hadoop/pull/4937/files)
### Modifications
- [x] `doc-not-needed` <!-- Your PR changes do not impact docs -->
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] Technoboy- closed pull request #18022: [fix][sec] File tiered storage: upgrade jettison to get rid of CVE-2022-40149
Posted by GitBox <gi...@apache.org>.
Technoboy- closed pull request #18022: [fix][sec] File tiered storage: upgrade jettison to get rid of CVE-2022-40149
URL: https://github.com/apache/pulsar/pull/18022
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] nicoloboschi merged pull request #18022: [fix][sec] File tiered storage: upgrade jettison to get rid of CVE-2022-40149
Posted by GitBox <gi...@apache.org>.
nicoloboschi merged PR #18022:
URL: https://github.com/apache/pulsar/pull/18022
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] codecov-commenter commented on pull request #18022: [fix][sec] File tiered storage: upgrade jettison to get rid of CVE-2022-40149
Posted by GitBox <gi...@apache.org>.
codecov-commenter commented on PR #18022:
URL: https://github.com/apache/pulsar/pull/18022#issuecomment-1280557560
# [Codecov](https://codecov.io/gh/apache/pulsar/pull/18022?src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation) Report
> :exclamation: No coverage uploaded for pull request base (`master@92b4708`). [Click here to learn what that means](https://docs.codecov.io/docs/error-reference?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation#section-missing-base-commit).
> The diff coverage is `n/a`.
[](https://codecov.io/gh/apache/pulsar/pull/18022?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
```diff
@@ Coverage Diff @@
## master #18022 +/- ##
=========================================
Coverage ? 44.95%
Complexity ? 16968
=========================================
Files ? 1548
Lines ? 126073
Branches ? 13870
=========================================
Hits ? 56682
Misses ? 63522
Partials ? 5869
```
| Flag | Coverage Δ | |
|---|---|---|
| unittests | `44.95% <0.00%> (?)` | |
Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation#carryforward-flags-in-the-pull-request-comment) to find out more.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org