Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Security] Upgrade protobuf to 3.16.1 to address CVE-2021-22569 #13695

Merged

Conversation

lhotari
Copy link
Member

@lhotari lhotari commented Jan 10, 2022

Motivation

Modifications

  • upgrade protobuf from 3.11.4 to 3.16.1

Copy link
Contributor

@eolivelli eolivelli left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Lgtm

@shoothzj shoothzj merged commit 1a3688c into apache:master Jan 11, 2022
lhotari added a commit to datastax/pulsar that referenced this pull request Jan 11, 2022
…he#13695)

### Motivation

- protobuf < 3.16.1 contains DoS vulnerability CVE-2021-22569, https://nvd.nist.gov/vuln/detail/CVE-2021-22569.

### Modifications

- upgrade protobuf from 3.11.4 to 3.16.1

(cherry picked from commit 1a3688c)
nicoloboschi added a commit to datastax/pulsar that referenced this pull request Jan 11, 2022
…he#13695)

- protobuf < 3.16.1 contains DoS vulnerability CVE-2021-22569, https://nvd.nist.gov/vuln/detail/CVE-2021-22569.

- upgrade protobuf from 3.11.4 to 3.16.1

(cherry picked from commit 1a3688c)
liudezhi2098 pushed a commit to liudezhi2098/pulsar that referenced this pull request Jan 11, 2022
…he#13695)

### Motivation

- protobuf < 3.16.1 contains DoS vulnerability CVE-2021-22569, https://nvd.nist.gov/vuln/detail/CVE-2021-22569.

### Modifications

- upgrade protobuf from 3.11.4 to 3.16.1
codelipenghui pushed a commit that referenced this pull request Jan 18, 2022
### Motivation

- protobuf < 3.16.1 contains DoS vulnerability CVE-2021-22569, https://nvd.nist.gov/vuln/detail/CVE-2021-22569.

### Modifications

- upgrade protobuf from 3.11.4 to 3.16.1

(cherry picked from commit 1a3688c)
@codelipenghui codelipenghui added the cherry-picked/branch-2.9 Archived: 2.9 is end of life label Jan 18, 2022
@codelipenghui codelipenghui added this to the 2.10.0 milestone Jan 18, 2022
codelipenghui pushed a commit that referenced this pull request Jan 18, 2022
### Motivation

- protobuf < 3.16.1 contains DoS vulnerability CVE-2021-22569, https://nvd.nist.gov/vuln/detail/CVE-2021-22569.

### Modifications

- upgrade protobuf from 3.11.4 to 3.16.1

(cherry picked from commit 1a3688c)
@codelipenghui codelipenghui added the cherry-picked/branch-2.8 Archived: 2.8 is end of life label Jan 18, 2022
codelipenghui pushed a commit that referenced this pull request Jan 28, 2022
- protobuf < 3.16.1 contains DoS vulnerability CVE-2021-22569, https://nvd.nist.gov/vuln/detail/CVE-2021-22569.

- upgrade protobuf from 3.11.4 to 3.16.1

(cherry picked from commit 1a3688c)
@lhotari lhotari added the cherry-picked/branch-2.7 Archived: 2.7 is end of life label Feb 10, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/security cherry-picked/branch-2.7 Archived: 2.7 is end of life cherry-picked/branch-2.8 Archived: 2.8 is end of life cherry-picked/branch-2.9 Archived: 2.9 is end of life doc-not-needed Your PR changes do not impact docs release/2.7.5 release/2.8.3 release/2.9.2
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

8 participants