-
Notifications
You must be signed in to change notification settings - Fork 3.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[fix][sec] Fix transitive critical CVEs in file-system tiered storage #19957
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Good to go.
/pulsarbot rerun-failure-checks |
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## master #19957 +/- ##
=============================================
+ Coverage 31.88% 72.81% +40.93%
- Complexity 6421 31484 +25063
=============================================
Files 1682 1859 +177
Lines 127354 136851 +9497
Branches 13892 15050 +1158
=============================================
+ Hits 40601 99653 +59052
+ Misses 80714 29275 -51439
- Partials 6039 7923 +1884
Flags with carried forward coverage won't be shown. Click here to find out more. |
…apache#19957) (cherry picked from commit 07acdbc) (cherry picked from commit e078c6d)
As discussed on the mailing list https://lists.apache.org/thread/w4jzk27qhtosgsz7l9bmhf1t7o9mxjhp, there is no plan to release 2.9.6, so I am going to remove the release/2.9.6 label |
Motivation
Currently the file-system tiered storages brings in the following CVEs:
Modifications
All the above are depending from hadoop.
Verifying this change
Documentation
doc
doc-required
doc-not-needed
doc-complete
Matching PR in forked repository