Skip to content

[fix][sec] [branch-2.9] Bump snakeyaml to 1.32 for CVE-2022-38752 #18467

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
tisonkun merged 1 commit into from
Nov 15, 2022
Merged

[fix][sec] [branch-2.9] Bump snakeyaml to 1.32 for CVE-2022-38752 #18467

tisonkun merged 1 commit into from
Nov 15, 2022

Conversation

@tisonkun
Copy link
Member

@tisonkun tisonkun commented Nov 15, 2022

Backport #17779 to branch-2.9.

Documentation

  • doc
  • doc-required
  • doc-not-needed
  • doc-complete

Matching PR in forked repository

PR in forked repository:

@tisonkun
[fix][sec] [branch-2.9] Bump snakeyaml to 1.32 for CVE-2022-38752
7068dea 
Signed-off-by: tison <wander4096@gmail.com>
@tisonkun tisonkun mentioned this pull request Nov 15, 2022
Merged
4 tasks
@tisonkun
Copy link
Member Author

tisonkun commented Nov 15, 2022

Merging...

cc @congbobo184

@tisonkun tisonkun merged commit 1b41225 into apache:branch-2.9 Nov 15, 2022
@tisonkun tisonkun deleted the bp-17779 branch November 15, 2022 06:41
@congbobo184 congbobo184 added the cherry-picked/branch-2.9 Archived: 2.9 is end of life label Nov 15, 2022
@codelipenghui codelipenghui mentioned this pull request Dec 6, 2022
Merged
4 tasks
congbobo184 pushed a commit that referenced this pull request Dec 7, 2022
@tisonkun
[fix][sec] [branch-2.9] Bump snakeyaml to 1.32 for CVE-2022-38752 (#1…
757053d 
…8467)

Signed-off-by: tison <wander4096@gmail.com>
(cherry picked from commit 1b41225)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@nodece nodece nodece approved these changes

@Technoboy- Technoboy- Awaiting requested review from Technoboy-

@congbobo184 congbobo184 Awaiting requested review from congbobo184

Assignees

@tisonkun tisonkun

Labels

area/security cherry-picked/branch-2.9 Archived: 2.9 is end of life ready-to-test release/2.9.4

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@tisonkun @nodece @congbobo184