Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

address CVE-2024-4067 #864

Merged
merged 1 commit into from
Sep 4, 2024
Merged

address CVE-2024-4067 #864

merged 1 commit into from
Sep 4, 2024

Conversation

jackiehanyang
Copy link
Collaborator

Description

address cve - GHSA-952p-6rrq-rcjv

Issues Resolved

[List any issues this PR will resolve]

Check List

  • New functionality includes testing.
    • All tests pass
  • New functionality has been documented.
  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

@jackiehanyang
address CVE-2024-4067
a419219 
Signed-off-by: Jackie Han <jkhanjob@gmail.com>
@opensearch-trigger-bot opensearch-trigger-bot bot added dependencies Pull requests that update a dependency file backport 2.x labels Sep 4, 2024
@jackiehanyang jackiehanyang added backport 2.17 and removed dependencies Pull requests that update a dependency file labels Sep 4, 2024
@jackiehanyang jackiehanyang merged commit b06f1f7 into opensearch-project:main Sep 4, 2024
12 of 13 checks passed
opensearch-trigger-bot bot pushed a commit that referenced this pull request Sep 4, 2024
@jackiehanyang @github-actions
address CVE-2024-4067 (#864)
a64e824 
Signed-off-by: Jackie Han <jkhanjob@gmail.com>
(cherry picked from commit b06f1f7)
@opensearch-trigger-bot opensearch-trigger-bot bot mentioned this pull request Sep 4, 2024
Merged
opensearch-trigger-bot bot pushed a commit that referenced this pull request Sep 4, 2024
@jackiehanyang @github-actions
address CVE-2024-4067 (#864)
31fa8f9 
Signed-off-by: Jackie Han <jkhanjob@gmail.com>
(cherry picked from commit b06f1f7)
@opensearch-trigger-bot opensearch-trigger-bot bot mentioned this pull request Sep 4, 2024
Merged
jackiehanyang added a commit that referenced this pull request Sep 4, 2024
@opensearch-trigger-bot @jackiehanyang
address CVE-2024-4067 (#864) (#865)
5e61a48 
Signed-off-by: Jackie Han <jkhanjob@gmail.com>
(cherry picked from commit b06f1f7)

Co-authored-by: Jackie Han <jkhanjob@gmail.com>
jackiehanyang added a commit that referenced this pull request Sep 4, 2024
@opensearch-trigger-bot @jackiehanyang
address CVE-2024-4067 (#864) (#866)
addd527 
Signed-off-by: Jackie Han <jkhanjob@gmail.com>
(cherry picked from commit b06f1f7)

Co-authored-by: Jackie Han <jkhanjob@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@amitgalitz amitgalitz amitgalitz approved these changes

@ohltyler ohltyler Awaiting requested review from ohltyler ohltyler is a code owner

@kaituo kaituo Awaiting requested review from kaituo kaituo is a code owner

@sean-zheng-amazon sean-zheng-amazon Awaiting requested review from sean-zheng-amazon sean-zheng-amazon is a code owner

@dbwiddis dbwiddis Awaiting requested review from dbwiddis dbwiddis is a code owner

@owaiskazi19 owaiskazi19 Awaiting requested review from owaiskazi19 owaiskazi19 is a code owner

@joshpalis joshpalis Awaiting requested review from joshpalis joshpalis is a code owner

Assignees
No one assigned
Labels
backport 2.x backport 2.17
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@jackiehanyang @amitgalitz