You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@druid.apache.org by "ashibhardwaj (via GitHub)" <gi...@apache.org> on 2024/11/27 06:40:48 UTC
[PR] Upgrade netty version to fix CVE (druid)
ashibhardwaj opened a new pull request, #17515:
URL: https://github.com/apache/druid/pull/17515
Upgrading Netty from version `4.1.108.Final` to `4.1.115.Final` to fix CVE-2024-47535.
Refer: https://avd.aquasec.com/nvd/cve-2024-47535
(netty: Denial of Service attack on windows app using Netty)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
Re: [PR] Upgrade netty version to fix CVE (druid)
Posted by "cryptoe (via GitHub)" <gi...@apache.org>.
cryptoe commented on PR #17515:
URL: https://github.com/apache/druid/pull/17515#issuecomment-2579216321
Thanks @ashibhardwaj for your first contribution. Looking forward to many more.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
Re: [PR] Upgrade netty version to fix CVE (druid)
Posted by "ashibhardwaj (via GitHub)" <gi...@apache.org>.
ashibhardwaj commented on PR #17515:
URL: https://github.com/apache/druid/pull/17515#issuecomment-2507353390
@cryptoe can you confirm if the above tests are failing due to transient errors? I noticed that different tests have been failing for subsequent runs.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
Re: [PR] Upgrade netty version to fix CVE (druid)
Posted by "cryptoe (via GitHub)" <gi...@apache.org>.
cryptoe merged PR #17515:
URL: https://github.com/apache/druid/pull/17515
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org