You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@bookkeeper.apache.org by "lhotari (via GitHub)" <gi...@apache.org> on 2024/09/23 11:39:50 UTC
[PR] Upgrade protobuf to 3.25.5 to address CVE-2024-7254 [bookkeeper]
lhotari opened a new pull request, #4508:
URL: https://github.com/apache/bookkeeper/pull/4508
### Motivation
CVE-2024-7254
### Changes
Upgrade protobuf to 3.25.5
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@bookkeeper.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Upgrade protobuf to 3.25.5 to address CVE-2024-7254 [bookkeeper]
Posted by "lhotari (via GitHub)" <gi...@apache.org>.
lhotari commented on PR #4508:
URL: https://github.com/apache/bookkeeper/pull/4508#issuecomment-2809921086
This change in Pulsar https://github.com/apache/pulsar/pull/23632 should make it fine to cherry-pick to 4.16.x so that Pulsar protobuf version isn't tightly coupled to the protobuf version available in the classpath.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@bookkeeper.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Upgrade protobuf to 3.25.5 to address CVE-2024-7254 [bookkeeper]
Posted by "lhotari (via GitHub)" <gi...@apache.org>.
lhotari commented on PR #4508:
URL: https://github.com/apache/bookkeeper/pull/4508#issuecomment-2368834394
We should also upgrade grpc to latest stable which is compatible with 3.25.5 when we upgrade branch-4.17 and branch-4.16.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@bookkeeper.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Upgrade protobuf to 3.25.5 to address CVE-2024-7254 [bookkeeper]
Posted by "shoothzj (via GitHub)" <gi...@apache.org>.
shoothzj merged PR #4508:
URL: https://github.com/apache/bookkeeper/pull/4508
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@bookkeeper.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Upgrade protobuf to 3.25.5 to address CVE-2024-7254 [bookkeeper]
Posted by "lhotari (via GitHub)" <gi...@apache.org>.
lhotari commented on PR #4508:
URL: https://github.com/apache/bookkeeper/pull/4508#issuecomment-2368006974
Upgrading in Pulsar isn't simple. Related Pulsar dev mailing list message: https://lists.apache.org/thread/73jk2mx4nj82kxwvwgcqz5m63scqcy2s
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@bookkeeper.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org