Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade SnakeYAML to v2.1 #17446

Merged
merged 1 commit into from
Sep 8, 2020
Merged

Upgrade SnakeYAML to v2.1 #17446

merged 1 commit into from
Sep 8, 2020

Conversation

kierendavies
Copy link
Contributor

Closes #17425

@ghost ghost added the Source: Community PR or issue was opened by a community user label Sep 1, 2020
@devOpsHazelcast
Copy link
Collaborator

Can one of the admins verify this patch?

@devOpsHazelcast
Copy link
Collaborator

devOpsHazelcast commented Sep 1, 2020

CLA assistant check
All committers have signed the CLA.

@mmedenjak
Copy link
Contributor

@kierendavies thank you for the fix! Can you sign the contributor agreement so we proceed with merging the fix? It should be fairly straightforward.

@kierendavies
Copy link
Contributor Author

@mmedenjak You're very welcome. I'm waiting on legal approval, but I hope to have that tomorrow.

@kierendavies
Copy link
Contributor Author

Signed 😄

Copy link
Contributor

@mmedenjak mmedenjak left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for the fix PR 🙇

@mmedenjak mmedenjak merged commit a46f841 into hazelcast:master Sep 8, 2020
mmedenjak pushed a commit to mmedenjak/hazelcast that referenced this pull request Sep 8, 2020
mmedenjak pushed a commit to mmedenjak/hazelcast that referenced this pull request Sep 8, 2020
mmedenjak pushed a commit to mmedenjak/hazelcast that referenced this pull request Mar 3, 2021
mmedenjak added a commit that referenced this pull request Mar 3, 2021
* Updated to Jackson version to address a Twistlock-reported issue: CVE-2020-24616 (#17484)

(cherry picked from commit cad3caf)

* Upgrade SnakeYAML to v2.1 (#17446)

(cherry picked from commit a46f841)

Co-authored-by: keith-f <k.s.flanagan@gmail.com>
Co-authored-by: Kieren Davies <kieren@kdavi.es>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Vulnerability in dependency snakeyaml-engine v1.0
5 participants