[
https://issues.apache.org/jira/browse/YUNIKORN-699?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17359642#comment-17359642
]
Weiwei Yang commented on YUNIKORN-699:
--------------------------------------
hi [~Yukali] do you want to handle this issue?
The similar change has been done in YUNIKORN-691
> replace the UUID library in the shim repo
> -----------------------------------------
>
> Key: YUNIKORN-699
> URL: https://issues.apache.org/jira/browse/YUNIKORN-699
> Project: Apache YuniKorn
> Issue Type: Bug
> Components: core - scheduler
> Reporter: Wilfred Spiegelenburg
> Assignee: Chen Yu Teng
> Priority: Blocker
> Labels: cve, pull-request-available
> Fix For: 0.11
>
>
> The library we use github.com/satori/go.uuid has a CVE open against it and
> has had for a long time. Maintenance of the code is also questionable.
> We should move to github.com/google/uuid v1.2.0.
> That would be a simple replacement of {{uuid.NewV4().String()}} with
> {{uuid.NewString()}}
> This latest version provides a {{uuid.NewString()}} method if we stick with
> an older version it would become {{uuid.New().String()}}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
