Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix snakeyaml and protobuf-java cves #2724

Merged
merged 1 commit into from
Oct 12, 2022

Conversation

gaiksaya
Copy link
Member

Signed-off-by: Sayali Gaikawad [email protected]

Description

Fix snakeyaml and protobuf-java cves

Issues Resolved

closes #2701 #2555 #2556

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Signed-off-by: Sayali Gaikawad <[email protected]>
@gaiksaya gaiksaya requested a review from a team as a code owner October 11, 2022 23:54
@codecov-commenter
Copy link

codecov-commenter commented Oct 11, 2022

Codecov Report

Merging #2724 (a06bf12) into main (a12827a) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main    #2724   +/-   ##
=======================================
  Coverage   94.10%   94.10%           
=======================================
  Files         156      156           
  Lines        4208     4208           
=======================================
  Hits         3960     3960           
  Misses        248      248           

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

@peterzhuamazon
Copy link
Member

The groovy test is not related, merging.

@peterzhuamazon peterzhuamazon merged commit 54d0878 into opensearch-project:main Oct 12, 2022
@gaiksaya gaiksaya deleted the cve-fixes branch October 12, 2022 18:35
monusingh-1 pushed a commit to monusingh-1/os_build that referenced this pull request Nov 2, 2022
Signed-off-by: Sayali Gaikawad <[email protected]>

Signed-off-by: Sayali Gaikawad <[email protected]>
Signed-off-by: Monu Singh <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

CVE-2022-3171 (Medium) detected in protobuf-java-3.19.3.jar
3 participants