You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@hudi.apache.org by "senthh (via GitHub)" <gi...@apache.org> on 2024/10/22 09:47:55 UTC

[PR] HUDI-8399 - Upgrade protobuf version to 3.25.5 to fix CVE-2024-7254 [hudi]

senthh opened a new pull request, #12140:
URL: https://github.com/apache/hudi/pull/12140

   ### Change Logs
   
   _Describe context and summary for this change. Highlight if any code was copied._
   
   Upgrade protobuf version to 3.25.5 to fix CVE-2024-7254
   
   ### Impact
   
   _Describe any public API or user-facing feature change or any performance impact._
   
   protobuf version 3.17.* is having vulnerability  CVE-2024-7254
   
   ### Risk level (write none, low medium or high below)
   
   _If medium or high, explain what verification was done to mitigate the risks._
   
   High
   
   ### Documentation Update
   
   Upgrade protobuf version to 3.25.5 to fix CVE-2024-7254
   
   _Describe any necessary documentation update if there is any new feature, config, or user-facing change. If not, put "none"._
   
   - _The config description must be updated if new configs are added or the default value of the configs are changed_
   - _Any new feature or user-facing change requires updating the Hudi website. Please create a Jira ticket, attach the
     ticket number here and follow the [instruction](https://hudi.apache.org/contribute/developer-setup#website) to make
     changes to the website._
   
   ### Contributor's checklist
   
   - [ ] Read through [contributor's guide](https://hudi.apache.org/contribute/how-to-contribute)
   - [ ] Change Logs and Impact were stated clearly
   - [ ] Adequate tests were added if applicable
   - [ ] CI passed
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@hudi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] HUDI-8399 - Upgrade protobuf version to 3.25.5 to fix CVE-2024-7254 [hudi]

Posted by "hudi-bot (via GitHub)" <gi...@apache.org>.
hudi-bot commented on PR #12140:
URL: https://github.com/apache/hudi/pull/12140#issuecomment-2428812961

   <!--
   Meta data
   {
     "version" : 1,
     "metaDataEntries" : [ {
       "hash" : "55d2dab8dcedbb0d13228254f897ea6160555ea5",
       "status" : "UNKNOWN",
       "url" : "TBD",
       "triggerID" : "55d2dab8dcedbb0d13228254f897ea6160555ea5",
       "triggerType" : "PUSH"
     } ]
   }-->
   ## CI report:
   
   * 55d2dab8dcedbb0d13228254f897ea6160555ea5 UNKNOWN
   
   <details>
   <summary>Bot commands</summary>
     @hudi-bot supports the following commands:
   
    - `@hudi-bot run azure` re-run the last Azure build
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@hudi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [HUDI-8399] Upgrade protobuf version to 3.25.5 to fix CVE-2024-7254 [hudi]

Posted by "wombatu-kun (via GitHub)" <gi...@apache.org>.
wombatu-kun merged PR #12140:
URL: https://github.com/apache/hudi/pull/12140


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@hudi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [HUDI-8399] Upgrade protobuf version to 3.25.5 to fix CVE-2024-7254 [hudi]

Posted by "senthh (via GitHub)" <gi...@apache.org>.
senthh commented on PR #12140:
URL: https://github.com/apache/hudi/pull/12140#issuecomment-2430871424

   @hudi-bot run azure


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@hudi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [HUDI-8399] Upgrade protobuf version to 3.25.5 to fix CVE-2024-7254 [hudi]

Posted by "hudi-bot (via GitHub)" <gi...@apache.org>.
hudi-bot commented on PR #12140:
URL: https://github.com/apache/hudi/pull/12140#issuecomment-2430972941

   <!--
   Meta data
   {
     "version" : 1,
     "metaDataEntries" : [ {
       "hash" : "55d2dab8dcedbb0d13228254f897ea6160555ea5",
       "status" : "SUCCESS",
       "url" : "https://dev.azure.com/apachehudi/a1a51da7-8592-47d4-88dc-fd67bed336bb/_build/results?buildId=1330",
       "triggerID" : "55d2dab8dcedbb0d13228254f897ea6160555ea5",
       "triggerType" : "PUSH"
     }, {
       "hash" : "55d2dab8dcedbb0d13228254f897ea6160555ea5",
       "status" : "SUCCESS",
       "url" : "https://dev.azure.com/apachehudi/a1a51da7-8592-47d4-88dc-fd67bed336bb/_build/results?buildId=1361",
       "triggerID" : "2430871424",
       "triggerType" : "MANUAL"
     } ]
   }-->
   ## CI report:
   
   * 55d2dab8dcedbb0d13228254f897ea6160555ea5 Azure: [SUCCESS](https://dev.azure.com/apachehudi/a1a51da7-8592-47d4-88dc-fd67bed336bb/_build/results?buildId=1330) Azure: [SUCCESS](https://dev.azure.com/apachehudi/a1a51da7-8592-47d4-88dc-fd67bed336bb/_build/results?buildId=1361) 
   
   <details>
   <summary>Bot commands</summary>
     @hudi-bot supports the following commands:
   
    - `@hudi-bot run azure` re-run the last Azure build
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@hudi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] HUDI-8399 - Upgrade protobuf version to 3.25.5 to fix CVE-2024-7254 [hudi]

Posted by "senthh (via GitHub)" <gi...@apache.org>.
senthh commented on PR #12140:
URL: https://github.com/apache/hudi/pull/12140#issuecomment-2428815066

   @bhasudha @yihua Could you please review this PR


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@hudi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] HUDI-8399 - Upgrade protobuf version to 3.25.5 to fix CVE-2024-7254 [hudi]

Posted by "hudi-bot (via GitHub)" <gi...@apache.org>.
hudi-bot commented on PR #12140:
URL: https://github.com/apache/hudi/pull/12140#issuecomment-2428966342

   <!--
   Meta data
   {
     "version" : 1,
     "metaDataEntries" : [ {
       "hash" : "55d2dab8dcedbb0d13228254f897ea6160555ea5",
       "status" : "SUCCESS",
       "url" : "https://dev.azure.com/apachehudi/a1a51da7-8592-47d4-88dc-fd67bed336bb/_build/results?buildId=1330",
       "triggerID" : "55d2dab8dcedbb0d13228254f897ea6160555ea5",
       "triggerType" : "PUSH"
     } ]
   }-->
   ## CI report:
   
   * 55d2dab8dcedbb0d13228254f897ea6160555ea5 Azure: [SUCCESS](https://dev.azure.com/apachehudi/a1a51da7-8592-47d4-88dc-fd67bed336bb/_build/results?buildId=1330) 
   
   <details>
   <summary>Bot commands</summary>
     @hudi-bot supports the following commands:
   
    - `@hudi-bot run azure` re-run the last Azure build
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@hudi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] HUDI-8399 - Upgrade protobuf version to 3.25.5 to fix CVE-2024-7254 [hudi]

Posted by "hudi-bot (via GitHub)" <gi...@apache.org>.
hudi-bot commented on PR #12140:
URL: https://github.com/apache/hudi/pull/12140#issuecomment-2428816374

   <!--
   Meta data
   {
     "version" : 1,
     "metaDataEntries" : [ {
       "hash" : "55d2dab8dcedbb0d13228254f897ea6160555ea5",
       "status" : "PENDING",
       "url" : "https://dev.azure.com/apachehudi/a1a51da7-8592-47d4-88dc-fd67bed336bb/_build/results?buildId=1330",
       "triggerID" : "55d2dab8dcedbb0d13228254f897ea6160555ea5",
       "triggerType" : "PUSH"
     } ]
   }-->
   ## CI report:
   
   * 55d2dab8dcedbb0d13228254f897ea6160555ea5 Azure: [PENDING](https://dev.azure.com/apachehudi/a1a51da7-8592-47d4-88dc-fd67bed336bb/_build/results?buildId=1330) 
   
   <details>
   <summary>Bot commands</summary>
     @hudi-bot supports the following commands:
   
    - `@hudi-bot run azure` re-run the last Azure build
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@hudi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [HUDI-8399] Upgrade protobuf version to 3.25.5 to fix CVE-2024-7254 [hudi]

Posted by "hudi-bot (via GitHub)" <gi...@apache.org>.
hudi-bot commented on PR #12140:
URL: https://github.com/apache/hudi/pull/12140#issuecomment-2430872282

   <!--
   Meta data
   {
     "version" : 1,
     "metaDataEntries" : [ {
       "hash" : "55d2dab8dcedbb0d13228254f897ea6160555ea5",
       "status" : "SUCCESS",
       "url" : "https://dev.azure.com/apachehudi/a1a51da7-8592-47d4-88dc-fd67bed336bb/_build/results?buildId=1330",
       "triggerID" : "55d2dab8dcedbb0d13228254f897ea6160555ea5",
       "triggerType" : "PUSH"
     }, {
       "hash" : "55d2dab8dcedbb0d13228254f897ea6160555ea5",
       "status" : "PENDING",
       "url" : "https://dev.azure.com/apachehudi/a1a51da7-8592-47d4-88dc-fd67bed336bb/_build/results?buildId=1361",
       "triggerID" : "2430871424",
       "triggerType" : "MANUAL"
     } ]
   }-->
   ## CI report:
   
   * 55d2dab8dcedbb0d13228254f897ea6160555ea5 Azure: [SUCCESS](https://dev.azure.com/apachehudi/a1a51da7-8592-47d4-88dc-fd67bed336bb/_build/results?buildId=1330) Azure: [PENDING](https://dev.azure.com/apachehudi/a1a51da7-8592-47d4-88dc-fd67bed336bb/_build/results?buildId=1361) 
   
   <details>
   <summary>Bot commands</summary>
     @hudi-bot supports the following commands:
   
    - `@hudi-bot run azure` re-run the last Azure build
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@hudi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [HUDI-8399] Upgrade protobuf version to 3.25.5 to fix CVE-2024-7254 [hudi]

Posted by "senthh (via GitHub)" <gi...@apache.org>.
senthh commented on PR #12140:
URL: https://github.com/apache/hudi/pull/12140#issuecomment-2430869568

    /validate-pr


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@hudi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org