Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix CVE-2023-22102 #2238

Merged
merged 1 commit into from
Sep 17, 2024
Merged

Fix CVE-2023-22102 #2238

merged 1 commit into from
Sep 17, 2024

Conversation

brfrn169
Copy link
Collaborator

@brfrn169 brfrn169 commented Sep 17, 2024

Description

This PR fixes CVE-2023-22102 by upgrading the MySQL driver to 8.4.0. In #2227, we upgraded the MySQL driver to 9.0.0, but it caused a Protocol Buffers error because the MySQL driver depends on Protocol Buffers 4. Therefore, this PR upgrades the MySQL driver to 8.4.0, which depends on Protocol Buffers 3.

Related issues and/or PRs

Changes made

  • Bumped up the mysql driver to 8.4.0.

Checklist

  • I have commented my code, particularly in hard-to-understand areas.
  • I have updated the documentation to reflect the changes.
  • Any remaining open issues linked to this PR are documented and up-to-date (Jira, GitHub, etc.).
  • Tests (unit, integration, etc.) have been added for the changes.
  • My changes generate no new warnings.
  • Any dependent changes in other PRs have been merged and published.

Additional notes (optional)

N/A

Release notes

Upgraded the mysql driver to fix security issues. CVE-2023-22102

@brfrn169 brfrn169 self-assigned this Sep 17, 2024
@brfrn169
Copy link
Collaborator Author

This change was already approved in #2227, so I'll go ahead and merge it.

@brfrn169 brfrn169 merged commit d5c8457 into master Sep 17, 2024
46 checks passed
@brfrn169 brfrn169 deleted the fix-cve-2023-22102 branch September 17, 2024 14:47
feeblefakie pushed a commit that referenced this pull request Sep 17, 2024
brfrn169 added a commit that referenced this pull request Sep 17, 2024
brfrn169 added a commit that referenced this pull request Sep 17, 2024
brfrn169 added a commit that referenced this pull request Sep 17, 2024
brfrn169 added a commit that referenced this pull request Sep 17, 2024
brfrn169 added a commit that referenced this pull request Sep 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant