[jira] [Assigned] (YUNIKORN-691) move to different UUID library

["Wilfred Spiegelenburg (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/YUNIKORN-691?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Wilfred Spiegelenburg reassigned YUNIKORN-691:
----------------------------------------------

    Assignee: Wilfred Spiegelenburg

> move to different UUID library
> ------------------------------
>
>                 Key: YUNIKORN-691
>                 URL: https://issues.apache.org/jira/browse/YUNIKORN-691
>             Project: Apache YuniKorn
>          Issue Type: Bug
>          Components: core - scheduler, shim - kubernetes
>            Reporter: Wilfred Spiegelenburg
>            Assignee: Wilfred Spiegelenburg
>            Priority: Blocker
>              Labels: cve
>             Fix For: 0.11
>
>
> The library we use github.com/satori/go.uuid has a CVE open against it and has had for a long time. Maintenance of the code is also questionable.
> We should move to github.com/google/uuid v1.2.0. 
> That would be a simple replacement of {{uuid.NewV4().String()}} with {{uuid.NewString()}}
> This latest version provides a {{uuid.NewString()}} method if we stick with an older version it would become {{uuid.New().String()}}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@yunikorn.apache.org
For additional commands, e-mail: issues-help@yunikorn.apache.org