You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@druid.apache.org by "tejaswini-imply (via GitHub)" <gi...@apache.org> on 2023/09/22 06:36:13 UTC
[PR] Skip dependency-check on extensions-contrib modules and suppress false-positive gRPC CVEs (druid)
tejaswini-imply opened a new pull request, #15026:
URL: https://github.com/apache/druid/pull/15026
With this PR contrib extensions are being excluded from dependency CVE checks so that the release process would go smoothly. Instead, those CVEs in contrib extensions can be fixed on an ad-hoc basis when someone reports them.
Discussion thread - https://lists.apache.org/thread/hmoc68fg3gmwjz110tf3s5sxrmnr34jk
**suppress false-positive gRPC CVEs:**
[CVE-2023-4785](https://nvd.nist.gov/vuln/detail/CVE-2023-4785), [CVE-2023-33953](https://cloud.google.com/support/bulletins#gcp-2023-022) aren't applicable to gRPC Java.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
Re: [PR] Skip dependency-check on extensions-contrib modules and suppress false-positive gRPC CVEs (druid)
Posted by "abhishekagarwal87 (via GitHub)" <gi...@apache.org>.
abhishekagarwal87 merged PR #15026:
URL: https://github.com/apache/druid/pull/15026
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org