Skip to content

[owasp] add suppression for Kotlin stdlib CVE-2022-24329 - part 2 #14715

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
codelipenghui merged 1 commit into from
Mar 17, 2022
Merged

[owasp] add suppression for Kotlin stdlib CVE-2022-24329 - part 2 #14715

codelipenghui merged 1 commit into from
Mar 17, 2022

Conversation

@nicoloboschi
Copy link
Contributor

@nicoloboschi nicoloboschi commented Mar 16, 2022

Motivation

Owasp check is failing due to Kotlin. We haven't completely fixed it in #14629
The reasons are the same written in #14629

note: the check still fail due to #14630

note2: please port this, along with #14629, to branch-2.9

Modifications

  • added suppressions for all the kotlin-stdlib packages
  • no-need-doc

@codelipenghui codelipenghui added this to the 2.11.0 milestone Mar 16, 2022
@codelipenghui codelipenghui added the doc-not-needed Your PR changes do not impact docs label Mar 16, 2022
@nicoloboschi
Copy link
Contributor Author

nicoloboschi commented Mar 16, 2022

/pulsarbot rerun-failure-checks

1 similar comment
@nicoloboschi
Copy link
Contributor Author

nicoloboschi commented Mar 16, 2022

/pulsarbot rerun-failure-checks

@codelipenghui codelipenghui merged commit 828d057 into apache:master Mar 17, 2022
nicoloboschi added a commit to datastax/pulsar that referenced this pull request Mar 17, 2022
@nicoloboschi
[owasp] add suppression for Kotlin stdlib CVE-2022-24329 - part 2 (ap…
00633af 
…ache#14715)

(cherry picked from commit 828d057)
aparajita89 pushed a commit to aparajita89/pulsar that referenced this pull request Mar 21, 2022
@nicoloboschi
[owasp] add suppression for Kotlin stdlib CVE-2022-24329 - part 2 (ap…
eb4c87e 
…ache#14715)
Nicklee007 pushed a commit to Nicklee007/pulsar that referenced this pull request Apr 20, 2022
@nicoloboschi
[owasp] add suppression for Kotlin stdlib CVE-2022-24329 - part 2 (ap…
73e5958 
…ache#14715)
nicoloboschi added a commit to datastax/pulsar that referenced this pull request May 5, 2022
@nicoloboschi
[owasp] add suppression for Kotlin stdlib CVE-2022-24329 - part 2 (ap…
cc4178b 
…ache#14715)

(cherry picked from commit 828d057)
nicoloboschi added a commit that referenced this pull request May 24, 2022
@nicoloboschi
[owasp] add suppression for Kotlin stdlib CVE-2022-24329 - part 2 (#1…
782ca43 
…4715)

(cherry picked from commit 828d057)
(cherry picked from commit cc4178b)
nicoloboschi added a commit that referenced this pull request May 24, 2022
@nicoloboschi
[owasp] add suppression for Kotlin stdlib CVE-2022-24329 - part 2 (#1…
2939bb7 
…4715)

(cherry picked from commit 828d057)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@codelipenghui codelipenghui codelipenghui approved these changes

@nodece nodece nodece approved these changes

Assignees

@nicoloboschi nicoloboschi

Labels

cherry-picked/branch-2.9 Archived: 2.9 is end of life cherry-picked/branch-2.10 doc-not-needed Your PR changes do not impact docs release/2.9.3 release/2.10.1

Projects

None yet

Milestone

2.11.0

Development

Successfully merging this pull request may close these issues.

3 participants

@nicoloboschi @codelipenghui @nodece