Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CVE fixes for v1.3.13 release #488

Merged
merged 3 commits into from
Sep 11, 2023
Merged

CVE fixes for v1.3.13 release #488

merged 3 commits into from
Sep 11, 2023

Conversation

khushbr
Copy link
Collaborator

@khushbr khushbr commented Sep 11, 2023

CVE fixes for v1.3.13 release, upgrade the grpc protobuf and netty dependency to 1.56.0

Check List

  • New functionality includes testing.
    • All tests pass
  • New functionality has been documented.
    • New functionality has javadoc added
  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Signed-off-by: Khushboo Rajput <khushbr@amazon.com>
Signed-off-by: Khushboo Rajput <khushbr@amazon.com>
@codecov
Copy link

codecov bot commented Sep 11, 2023

Codecov Report

Merging #488 (2b8ed84) into 1.3 (a80d503) will decrease coverage by 0.13%.
The diff coverage is 0.00%.

❗ Current head 2b8ed84 differs from pull request most recent head e61def7. Consider uploading reports for the commit e61def7 to get more accurate results

@@             Coverage Diff              @@
##                1.3     #488      +/-   ##
============================================
- Coverage     71.61%   71.48%   -0.13%     
+ Complexity     2948     2930      -18     
============================================
  Files           376      376              
  Lines         18839    18779      -60     
  Branches       1466     1438      -28     
============================================
- Hits          13492    13425      -67     
- Misses         4762     4767       +5     
- Partials        585      587       +2     
Files Changed Coverage Δ
...zer/decisionmaker/deciders/CacheHealthDecider.java 79.41% <0.00%> (ø)

... and 8 files with indirect coverage changes

Signed-off-by: Khushboo Rajput <khushbr@amazon.com>
@khushbr
Copy link
Collaborator Author

khushbr commented Sep 11, 2023

Mend Security check is currently failing for CVE-2023-34462: https://github.com/opensearch-project/performance-analyzer-rca/pull/488/checks?check_run_id=16695434293

This dependency version is picked from core and the failure will be resolved once the core has CVE fix added.

@khushbr khushbr merged commit 8a8862b into opensearch-project:1.3 Sep 11, 2023
5 of 8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants