Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Backport 2.x] Upgrade geckodriver to 3.0.2 to partially fix CVE-2022-33987 (#2166) #2397

Merged
merged 1 commit into from
Sep 22, 2022

Conversation

kavilla
Copy link
Member

@kavilla kavilla commented Sep 21, 2022

Backport 06abe83 from #2166

…rch-project#2166)

* Upgrade geckodriver to 3.0.2 to partially fix CVE-2022-33987

Signed-off-by: CCongWang <wangcong@umich.edu>

* Revert change to package.json

* Update yarn.lock

Signed-off-by: CCongWang <wangcong@umich.edu>
Co-authored-by: Ashwin P Chandran <ashwinpc1993@gmail.com>
Co-authored-by: Ashwin P Chandran <ashwinpc@amazon.com>
Co-authored-by: Josh Romero <rmerqg@amazon.com>
@kavilla kavilla requested a review from a team as a code owner September 21, 2022 00:39
@kavilla kavilla merged commit 3aacdc3 into opensearch-project:2.x Sep 22, 2022
@kavilla kavilla deleted the avillk/2.x/geckodriver branch September 22, 2022 16:16
opensearch-trigger-bot bot pushed a commit that referenced this pull request Sep 22, 2022
…2397)

* Upgrade geckodriver to 3.0.2 to partially fix CVE-2022-33987

Signed-off-by: CCongWang <wangcong@umich.edu>

* Revert change to package.json

* Update yarn.lock

Signed-off-by: CCongWang <wangcong@umich.edu>
Co-authored-by: Ashwin P Chandran <ashwinpc1993@gmail.com>
Co-authored-by: Ashwin P Chandran <ashwinpc@amazon.com>
Co-authored-by: Josh Romero <rmerqg@amazon.com>

Signed-off-by: CCongWang <wangcong@umich.edu>
Co-authored-by: Cong Wang <99116880+CCongWang@users.noreply.github.com>
Co-authored-by: Ashwin P Chandran <ashwinpc1993@gmail.com>
Co-authored-by: Ashwin P Chandran <ashwinpc@amazon.com>
Co-authored-by: Josh Romero <rmerqg@amazon.com>
(cherry picked from commit 3aacdc3)
kavilla pushed a commit that referenced this pull request Sep 23, 2022
…2397) (#2405)

* Upgrade geckodriver to 3.0.2 to partially fix CVE-2022-33987
* Revert change to package.json
* Update yarn.lock

Signed-off-by: CCongWang <wangcong@umich.edu>
Co-authored-by: Ashwin P Chandran <ashwinpc1993@gmail.com>
Co-authored-by: Ashwin P Chandran <ashwinpc@amazon.com>
Co-authored-by: Josh Romero <rmerqg@amazon.com>
Co-authored-by: Cong Wang <99116880+CCongWang@users.noreply.github.com>
(cherry picked from commit 3aacdc3)
ananzh added a commit to ananzh/OpenSearch-Dashboards that referenced this pull request Nov 1, 2022
geckodriver - only used in running functional tests. It got bumped
to 11.8.5 on 2022-06-02.

geckodriver has been bumped to 3.0.2 before and backported to 2.x
PR: opensearch-project#2397

However, due to this PR:
opensearch-project#2409
geckodriver is set back to 3.0.1. Therefore, we will reset it to 3.0.2.

Signed-off-by: Anan Zhuang <ananzh@amazon.com>
ananzh added a commit to ananzh/OpenSearch-Dashboards that referenced this pull request Nov 1, 2022
geckodriver - only used in running functional tests. It got bumped
to 11.8.5 on 2022-06-02.

geckodriver has been bumped to 3.0.2 before and backported to 2.x
PR: opensearch-project#2397

However, due to this PR:
opensearch-project#2409
geckodriver is set back to 3.0.1. Therefore, we will reset it to 3.0.2.

Issue Resolved:
opensearch-project#1764

Signed-off-by: Anan Zhuang <ananzh@amazon.com>
ananzh added a commit to ananzh/OpenSearch-Dashboards that referenced this pull request Nov 1, 2022
geckodriver - only used in running functional tests. It got bumped
to 11.8.5 on 2022-06-02.

geckodriver has been bumped to 3.0.2 before and backported to 2.x
PR: opensearch-project#2397

However, due to this PR:
opensearch-project#2409
geckodriver is set back to 3.0.1. Therefore, we will reset it to 3.0.2.

Issue Resolved:
opensearch-project#1764

Signed-off-by: Anan Zhuang <ananzh@amazon.com>
ananzh added a commit that referenced this pull request Nov 1, 2022
geckodriver - only used in running functional tests. It got bumped
to 11.8.5 on 2022-06-02.

geckodriver has been bumped to 3.0.2 before and backported to 2.x
PR: #2397

However, due to this PR:
#2409
geckodriver is set back to 3.0.1. Therefore, we will reset it to 3.0.2.

Issue Resolved:
#1764

Signed-off-by: Anan Zhuang <ananzh@amazon.com>

Signed-off-by: Anan Zhuang <ananzh@amazon.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants