Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[doc][proxy] Document how to mitigate CVE-2022-24280 #17825

Merged
merged 1 commit into from
Sep 23, 2022

Conversation

lhotari
Copy link
Member

@lhotari lhotari commented Sep 23, 2022

Motivation

See https://github.com/apache/pulsar/wiki/CVE-2022-24280

Modifications

Add documentation how to address "Apache Pulsar Proxy target broker address isn't validated (CVE-2022-24280)"

Documentation

  • doc-required
    (Your PR needs to update docs and you will update later)

  • doc-not-needed
    (Please explain why)

  • doc
    (Your PR contains doc changes)

  • doc-complete
    (Docs have been already added)

@lhotari lhotari added the doc Your PR contains doc changes, no matter whether the changes are in markdown or code files. label Sep 23, 2022
Copy link
Contributor

@eolivelli eolivelli left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM
thanks

@lhotari lhotari merged commit 0c0984a into apache:master Sep 23, 2022
lhotari added a commit that referenced this pull request Sep 23, 2022
lhotari added a commit that referenced this pull request Sep 23, 2022
lhotari added a commit that referenced this pull request Sep 23, 2022
(cherry picked from commit 0c0984a)
(cherry picked from commit 5ffd0b9)
lhotari added a commit that referenced this pull request Sep 23, 2022
(cherry picked from commit 0c0984a)
(cherry picked from commit 5ffd0b9)
lhotari added a commit that referenced this pull request Sep 23, 2022
(cherry picked from commit 0c0984a)
(cherry picked from commit 5ffd0b9)
(cherry picked from commit 4d2a279)
nicoloboschi pushed a commit to datastax/pulsar that referenced this pull request Sep 28, 2022
(cherry picked from commit 0c0984a)
(cherry picked from commit 5ffd0b9)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/security doc Your PR contains doc changes, no matter whether the changes are in markdown or code files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants