natas_hw
/
cassandra
mirror of https://github.com/apache/cassandra
0
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Upgrade to snakeyaml >= 1.26 version for CVE-2017-18640 fix 

patch by Rahul Nandi; reviewed by Alex Petrov, David Capwell for CASSANDRA-16150
This commit is contained in:
Rahul Nandi 2020-10-09 10:56:55 -07:00 committed by David Capwell
parent 4564e10268
commit e37f766403
4 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
CHANGES.txt
View File

@ -18,6 +18,7 @@
* NPE thrown while updating speculative execution time if keyspace is removed during task execution (CASSANDRA-15949) * NPE thrown while updating speculative execution time if keyspace is removed during task execution (CASSANDRA-15949)
* Show the progress of data streaming and index build (CASSANDRA-15406) * Show the progress of data streaming and index build (CASSANDRA-15406)
* Add flag to disable chunk cache and disable by default (CASSANDRA-16036) * Add flag to disable chunk cache and disable by default (CASSANDRA-16036)
* Upgrade to snakeyaml >= 1.26 version for CVE-2017-18640 fix (CASSANDRA-16150)
Merged from 3.11: Merged from 3.11:
* Fix memory leak in CompressedChunkReader (CASSANDRA-15880) * Fix memory leak in CompressedChunkReader (CASSANDRA-15880)
* Don't attempt value skipping with mixed version cluster (CASSANDRA-15833) * Don't attempt value skipping with mixed version cluster (CASSANDRA-15833)

3
build.xml
View File

@ -583,8 +583,7 @@
<dependency groupId="com.googlecode.json-simple" artifactId="json-simple" version="1.1"/> <dependency groupId="com.googlecode.json-simple" artifactId="json-simple" version="1.1"/>
<dependency groupId="com.boundary" artifactId="high-scale-lib" version="1.0.6"/> <dependency groupId="com.boundary" artifactId="high-scale-lib" version="1.0.6"/>
<dependency groupId="com.github.jbellis" artifactId="jamm" version="${jamm.version}"/> <dependency groupId="com.github.jbellis" artifactId="jamm" version="${jamm.version}"/>
<dependency groupId="org.yaml" artifactId="snakeyaml" version="1.26"/>
<dependency groupId="org.yaml" artifactId="snakeyaml" version="1.23"/>
<dependency groupId="junit" artifactId="junit" version="4.12" /> <dependency groupId="junit" artifactId="junit" version="4.12" />
<dependency groupId="org.mockito" artifactId="mockito-core" version="3.2.4" /> <dependency groupId="org.mockito" artifactId="mockito-core" version="3.2.4" />
<dependency groupId="org.quicktheories" artifactId="quicktheories" version="0.25" /> <dependency groupId="org.quicktheories" artifactId="quicktheories" version="0.25" />

BIN
lib/snakeyaml-1.23.jar
View File

Binary file not shown.

BIN
lib/snakeyaml-1.26.jar Normal file
View File

Binary file not shown.