Fixed CVE - issue 86 mentioned in opensearch-dsl-py repo #295
Conversation
saimedhi
requested review from
VachaShah,
dblock,
harshavamsi,
axeoman,
deztructor and
Shephalimittal
as code owners
Signed-off-by: saimedhi <saimedhi@amazon.com>
saimedhi
force-pushed
the
fix/dsl-cve-#86
branch
from
e9d3821
to
6259825
Compare
saimedhi
changed the title
|
To solve the following cve, "certifi" library installed in setup.py file must be >=2022.12.07 for which python version must be >=3.6. |
|
This fix would also need to go in the dsl-py repo. |
In dsl-py repo, certify is coming from opensearch-py. There is no separate installation of certify over there, as of my knowledge. |
Got it, thanks for clarifying. So the issue opensearch-project/opensearch-dsl-py#86 would only resolve when there is a new version of the opensearch-py client with this fix and that new version is used in opensearch-dsl-py. |
* Created untriaged issue workflow. (#290) Signed-off-by: dblock <dblock@amazon.com> * Removed 'out/opensearchpy' folder which was produced while generating pyi files for plugins (#288) Signed-off-by: saimedhi <saimedhi@amazon.com> * Merging opensearch-dsl-py to opensearch-py (#287) Signed-off-by: saimedhi <saimedhi@amazon.com> * Fixed CVE - issue 86 mentioned in opensearch-dsl-py repo (#295) Signed-off-by: saimedhi <saimedhi@amazon.com> * Removing low-level and high-level client terminology (#298) Signed-off-by: Vacha Shah <vachshah@amazon.com> * Added upgrading.md file and updated it for opensearch-py 2.2.0 release (#293) Signed-off-by: saimedhi <saimedhi@amazon.com> --------- Signed-off-by: dblock <dblock@amazon.com> Signed-off-by: saimedhi <saimedhi@amazon.com> Signed-off-by: Vacha Shah <vachshah@amazon.com> Co-authored-by: Daniel (dB.) Doubrovkine <dblock@amazon.com> Co-authored-by: Sai Medhini Reddy Maryada <117196660+saimedhi@users.noreply.github.com> Co-authored-by: Vacha Shah <vachshah@amazon.com>
Description
Fixed CVE - issue 86 mentioned in opensearch-dsl-py repo
Closes opensearch-project/opensearch-dsl-py#86
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.