You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by "nikhilerigila09 (via GitHub)" <gi...@apache.org> on 2024/05/03 06:51:17 UTC
[PR] [fix][sec] Upgrade elasticsearch-java version to avoid CVE-2023-4043 [pulsar]
nikhilerigila09 opened a new pull request, #22640:
URL: https://github.com/apache/pulsar/pull/22640
Fixes https://github.com/apache/pulsar/issues/21783 &
Could fix some of the vulnerabilities on https://github.com/apache/pulsar/issues/21782
### Motivation
Avoid CVE-2023-4043
### Modifications
Upgrade elasticsearch-java version to 8.12.1
which uses org.eclipse.parsson:parsson@1.0.5 which no longer has the vulnerability.
### Verifying this change
- [X] Make sure that the change passes the CI checks.
### Does this pull request potentially affect one of the following parts:
*If the box was checked, please highlight the changes*
- [X] Dependencies (add or upgrade a dependency)
- [ ] The public API
- [ ] The schema
- [ ] The default values of configurations
- [ ] The threading model
- [ ] The binary protocol
- [ ] The REST endpoints
- [ ] The admin CLI options
- [ ] The metrics
- [ ] Anything that affects deployment
### Documentation
<!-- DO NOT REMOVE THIS SECTION. CHECK THE PROPER BOX ONLY. -->
- [ ] `doc` <!-- Your PR contains doc changes. -->
- [ ] `doc-required` <!-- Your PR changes impact docs and you will update later -->
- [X] `doc-not-needed` <!-- Your PR changes do not impact docs -->
- [ ] `doc-complete` <!-- Docs have been already added -->
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [fix][sec] Upgrade elasticsearch-java version to avoid CVE-2023-4043 [pulsar]
Posted by "lhotari (via GitHub)" <gi...@apache.org>.
lhotari merged PR #22640:
URL: https://github.com/apache/pulsar/pull/22640
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [fix][sec] Upgrade elasticsearch-java version to avoid CVE-2023-4043 [pulsar]
Posted by "codecov-commenter (via GitHub)" <gi...@apache.org>.
codecov-commenter commented on PR #22640:
URL: https://github.com/apache/pulsar/pull/22640#issuecomment-2093753323
## [Codecov](https://app.codecov.io/gh/apache/pulsar/pull/22640?dropdown=coverage&src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) Report
All modified and coverable lines are covered by tests :white_check_mark:
> Project coverage is 72.71%. Comparing base [(`bbc6224`)](https://app.codecov.io/gh/apache/pulsar/commit/bbc62245c5ddba1de4b1e7cee4ab49334bc36277?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) to head [(`cbc14a9`)](https://app.codecov.io/gh/apache/pulsar/pull/22640?dropdown=coverage&src=pr&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache).
> Report is 221 commits behind head on master.
<details><summary>Additional details and impacted files</summary>
[](https://app.codecov.io/gh/apache/pulsar/pull/22640?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)
```diff
@@ Coverage Diff @@
## master #22640 +/- ##
============================================
- Coverage 73.57% 72.71% -0.86%
+ Complexity 32624 32338 -286
============================================
Files 1877 1887 +10
Lines 139502 141006 +1504
Branches 15299 15478 +179
============================================
- Hits 102638 102537 -101
- Misses 28908 30608 +1700
+ Partials 7956 7861 -95
```
| [Flag](https://app.codecov.io/gh/apache/pulsar/pull/22640/flags?src=pr&el=flags&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | Coverage Δ | |
|---|---|---|
| [inttests](https://app.codecov.io/gh/apache/pulsar/pull/22640/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `27.31% <ø> (+2.72%)` | :arrow_up: |
| [systests](https://app.codecov.io/gh/apache/pulsar/pull/22640/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `24.57% <ø> (+0.24%)` | :arrow_up: |
| [unittests](https://app.codecov.io/gh/apache/pulsar/pull/22640/flags?src=pr&el=flag&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache) | `71.49% <ø> (-1.36%)` | :arrow_down: |
Flags with carried forward coverage won't be shown. [Click here](https://docs.codecov.io/docs/carryforward-flags?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache#carryforward-flags-in-the-pull-request-comment) to find out more.
[see 338 files with indirect coverage changes](https://app.codecov.io/gh/apache/pulsar/pull/22640/indirect-changes?src=pr&el=tree-more&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org