Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use SafeConstructor class for SnakeYAML #23091

Merged
merged 1 commit into from
Jan 22, 2022

Conversation

rsvoboda
Copy link
Member

Use SafeConstructor class for SnakeYAML

Inspired by #22664 changes

@quarkus-bot quarkus-bot bot added area/infra-automation anything related to CI, bots, etc. that are used to automated our infrastructure area/vertx labels Jan 21, 2022
@gsmet
Copy link
Member

gsmet commented Jan 21, 2022

Are you pointing to the right source? I don't see any explanation about why it's useful?

@geoand geoand added the triage/waiting-for-ci Ready to merge when CI successfully finishes label Jan 21, 2022
@quarkus-bot
Copy link

quarkus-bot bot commented Jan 21, 2022

Failing Jobs - Building 06a8c62

Status Name Step Failures Logs Raw logs
MicroProfile TCKs Tests Verify ⚠️ Check → Logs Raw logs

@jorsol
Copy link
Contributor

jorsol commented Jan 21, 2022

Are you pointing to the right source? I don't see any explanation about why it's useful?

I think is because of this: https://j0vsec.com/post/cve-2021-25738/

@geoand geoand merged commit 8a13b2e into quarkusio:main Jan 22, 2022
@quarkus-bot quarkus-bot bot added this to the 2.8 - main milestone Jan 22, 2022
@quarkus-bot quarkus-bot bot removed the triage/waiting-for-ci Ready to merge when CI successfully finishes label Jan 22, 2022
@gsmet gsmet modified the milestones: 2.8 - main, 2.7.0.Final Jan 24, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/infra-automation anything related to CI, bots, etc. that are used to automated our infrastructure area/vertx
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants