You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2021/01/20 15:45:44 UTC
[GitHub] [pulsar] fmiguelez opened a new issue #9249: Upgrade Netty dependency in broker to solve vulnerabilities: CVE-2019-16869, CVE-2020-11612, CVE-2019-20445, CVE-2019-20444
fmiguelez opened a new issue #9249:
URL: https://github.com/apache/pulsar/issues/9249
Version of Netty (4.1.32) used inside Apache Pulsar Broker (at least 2.7.0) is affected by following high risk vulnerabilities: [CVE-2019-16869](https://nvd.nist.gov/vuln/detail/CVE-2019-16869), [CVE-2020-11612](https://nvd.nist.gov/vuln/detail/CVE-2020-11612), [CVE-2019-20445](https://nvd.nist.gov/vuln/detail/CVE-2019-20445), [CVE-2019-20444](https://nvd.nist.gov/vuln/detail/CVE-2019-20444).
All these vulnerabilities are solved in Netty 4.1.44.Final.
**Describe the solution you'd like**
A clear and concise description of what you want to happen.
**Describe alternatives you've considered**
A clear and concise description of any alternative solutions or features you've considered.
**Additional context**
Add any other context or screenshots about the feature request here.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] hpvd commented on issue #9249: Upgrade Netty dependency in broker to solve vulnerabilities: CVE-2019-16869, CVE-2020-11612, CVE-2019-20445, CVE-2019-20444
Posted by GitBox <gi...@apache.org>.
hpvd commented on issue #9249:
URL: https://github.com/apache/pulsar/issues/9249#issuecomment-764524873
Since these update-needs regularly occurs,
one should think of implementing a procedure to address this:
Automated security and update routine before every release
https://github.com/apache/pulsar/issues/8815
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] hpvd commented on issue #9249: Upgrade Netty dependency in broker to solve vulnerabilities: CVE-2019-16869, CVE-2020-11612, CVE-2019-20445, CVE-2019-20444
Posted by GitBox <gi...@apache.org>.
hpvd commented on issue #9249:
URL: https://github.com/apache/pulsar/issues/9249#issuecomment-764524873
Since these update-needs regularly occurs,
one should think of implementing a procedure to address this:
Automated security and update routine before every release
https://github.com/apache/pulsar/issues/8815
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [pulsar] codelipenghui commented on issue #9249: Upgrade Netty dependency in broker to solve vulnerabilities: CVE-2019-16869, CVE-2020-11612, CVE-2019-20445, CVE-2019-20444
Posted by GitBox <gi...@apache.org>.
codelipenghui commented on issue #9249:
URL: https://github.com/apache/pulsar/issues/9249#issuecomment-1058894010
The issue had no activity for 30 days, mark with Stale label.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org