Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Patched security vulnerability by updating Ranger libraries to the ne… #15363

Conversation

vivek807
Copy link
Contributor

Fixes #14454 .

Description

Patched security vulnerability by updating Ranger libraries to the newest available version.

Release note

This change removes the log4j dependency from the extension. It is done by updating Ranger libraries to the newest available version. The functioning of this library does not change.


Copy link
Contributor

@BartMiki BartMiki left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There were no changes to the Druid parent pom.xml, the ranger version should be updated there.

extensions-core/druid-ranger-security/pom.xml Outdated Show resolved Hide resolved
extensions-core/druid-ranger-security/pom.xml Outdated Show resolved Hide resolved
extensions-core/druid-ranger-security/pom.xml Outdated Show resolved Hide resolved
extensions-core/druid-ranger-security/pom.xml Outdated Show resolved Hide resolved
@vivek807 vivek807 marked this pull request as ready for review November 15, 2023 12:50
Copy link
Contributor

@cryptoe cryptoe left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Changes LGTM. Waiting for a clean CI run.

@abhishekagarwal87 abhishekagarwal87 merged commit c14cfc2 into apache:master Nov 22, 2023
83 checks passed
@abhishekagarwal87
Copy link
Contributor

thank you for your first contribution @vivek807

@vivek807
Copy link
Contributor Author

thank you for your first contribution @vivek807

Thanks @abhishekagarwal87 :)

yashdeep97 pushed a commit to yashdeep97/druid that referenced this pull request Dec 1, 2023
apache#15363)

Patched security vulnerability by updating Ranger libraries to the newest available version.
Pankaj260100 pushed a commit to confluentinc/druid that referenced this pull request Dec 13, 2023
apache#15363)

Patched security vulnerability by updating Ranger libraries to the newest available version.
Pankaj260100 pushed a commit to confluentinc/druid that referenced this pull request Dec 19, 2023
apache#15363)

Patched security vulnerability by updating Ranger libraries to the newest available version.
Pankaj260100 pushed a commit to confluentinc/druid that referenced this pull request Dec 19, 2023
apache#15363)

Patched security vulnerability by updating Ranger libraries to the newest available version.
@LakshSingla LakshSingla added this to the 29.0.0 milestone Jan 29, 2024
LakshSingla added a commit to LakshSingla/druid that referenced this pull request Feb 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Vulnerable Log4j 1.x is bundled with the Ranger extension
5 participants