Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Manual backport 2.5][CVE-2022-25881] Resolve http-cache-semantics to 4.1.1 (#3409) #3437

Merged

Conversation

zhongnansu
Copy link
Member

Manual backport #3409 to 2.5

Check List

  • All tests pass
    • yarn test:jest
    • yarn test:jest_integration
    • yarn test:ftr
  • New functionality includes testing.
  • New functionality has been documented.
  • Update CHANGELOG.md
  • Commits are signed per the DCO using --signoff

…oject#3409)

Signed-off-by: Su <szhongna@amazon.com>
Co-authored-by: Anan Zhuang <ananzh@amazon.com>
(cherry picked from commit 16a2b57)
@zhongnansu zhongnansu requested a review from a team as a code owner February 16, 2023 23:49
@zhongnansu zhongnansu changed the title [CVE-2022-25881] Resolve http-cache-semantics to 4.1.1 (#3409) [Manual backport 2.5][CVE-2022-25881] Resolve http-cache-semantics to 4.1.1 (#3409) Feb 16, 2023
@codecov-commenter
Copy link

Codecov Report

Merging #3437 (89cc298) into 2.5 (7123e11) will decrease coverage by 0.05%.
The diff coverage is n/a.

📣 This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

@@            Coverage Diff             @@
##              2.5    #3437      +/-   ##
==========================================
- Coverage   66.55%   66.50%   -0.05%     
==========================================
  Files        3203     3203              
  Lines       61327    61327              
  Branches     9452     9452              
==========================================
- Hits        40815    40785      -30     
- Misses      18256    18281      +25     
- Partials     2256     2261       +5     
Flag Coverage Δ
Linux 66.50% <ø> (+<0.01%) ⬆️
Windows ?

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files Coverage Δ
src/dev/build/lib/get_build_number.ts 57.14% <0.00%> (-42.86%) ⬇️
src/setup_node_env/harden/child_process.js 38.46% <0.00%> (-38.47%) ⬇️
packages/osd-cross-platform/src/path.ts 51.21% <0.00%> (-34.15%) ⬇️
...ges/osd-apm-config-loader/src/config.test.mocks.ts 91.30% <0.00%> (-8.70%) ⬇️
src/dev/build/lib/config.ts 79.41% <0.00%> (-5.89%) ⬇️
...ic/application/models/sense_editor/sense_editor.ts 64.00% <0.00%> (-0.89%) ⬇️
packages/osd-optimizer/src/node/cache.ts 52.63% <0.00%> (+1.31%) ⬆️
...s/osd-optimizer/src/node/node_auto_tranpilation.ts 87.75% <0.00%> (+4.08%) ⬆️

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

@joshuarrrr joshuarrrr added 2.5.1 cve Security vulnerabilities detected by Dependabot or Mend labels Feb 17, 2023
@abbyhu2000 abbyhu2000 merged commit 70c2ba2 into opensearch-project:2.5 Feb 17, 2023
@joshuarrrr joshuarrrr added not in release PRs backported to already shipped releases with no future release planned and removed v2.5.1 labels Mar 10, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cve Security vulnerabilities detected by Dependabot or Mend not in release PRs backported to already shipped releases with no future release planned
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants