[jira] [Updated] (CASSANDRA-18083) snakeyaml-1.26.jar: CVE-2022-41854

2022-12-05 Thread Brandon Williams (Jira)


 [ 
https://issues.apache.org/jira/browse/CASSANDRA-18083?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Brandon Williams updated CASSANDRA-18083:
-
  Fix Version/s: 3.0.29
 3.11.15
 4.1.1
 4.2
 (was: 3.0.x)
 (was: 4.x)
 (was: 3.11.x)
 (was: 4.0.x)
 (was: 4.1.x)
  Since Version: NA
Source Control Link: 
https://github.com/apache/cassandra/commit/92019df4d8540b384d7fb8655f7c02293f7f7ec1
 Resolution: Fixed
 Status: Resolved  (was: Ready to Commit)

Committed, thanks for the review!

> snakeyaml-1.26.jar: CVE-2022-41854
> --
>
> Key: CASSANDRA-18083
> URL: https://issues.apache.org/jira/browse/CASSANDRA-18083
> Project: Cassandra
>  Issue Type: Bug
>  Components: Dependencies
>Reporter: Brandon Williams
>Assignee: Brandon Williams
>Priority: Normal
> Fix For: 3.0.29, 3.11.15, 4.1.1, 4.2
>
>
> https://nvd.nist.gov/vuln/detail/CVE-2022-41854



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

-
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org



[jira] [Updated] (CASSANDRA-18083) snakeyaml-1.26.jar: CVE-2022-41854

2022-12-04 Thread Berenguer Blasi (Jira)


 [ 
https://issues.apache.org/jira/browse/CASSANDRA-18083?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Berenguer Blasi updated CASSANDRA-18083:

Status: Ready to Commit  (was: Review In Progress)

> snakeyaml-1.26.jar: CVE-2022-41854
> --
>
> Key: CASSANDRA-18083
> URL: https://issues.apache.org/jira/browse/CASSANDRA-18083
> Project: Cassandra
>  Issue Type: Bug
>  Components: Dependencies
>Reporter: Brandon Williams
>Assignee: Brandon Williams
>Priority: Normal
> Fix For: 3.0.x, 3.11.x, 4.0.x, 4.1.x, 4.x
>
>
> https://nvd.nist.gov/vuln/detail/CVE-2022-41854



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

-
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org



[jira] [Updated] (CASSANDRA-18083) snakeyaml-1.26.jar: CVE-2022-41854

2022-12-04 Thread Berenguer Blasi (Jira)


 [ 
https://issues.apache.org/jira/browse/CASSANDRA-18083?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Berenguer Blasi updated CASSANDRA-18083:

Reviewers: Berenguer Blasi, Berenguer Blasi
   Berenguer Blasi, Berenguer Blasi  (was: Berenguer Blasi)
   Status: Review In Progress  (was: Patch Available)

> snakeyaml-1.26.jar: CVE-2022-41854
> --
>
> Key: CASSANDRA-18083
> URL: https://issues.apache.org/jira/browse/CASSANDRA-18083
> Project: Cassandra
>  Issue Type: Bug
>  Components: Dependencies
>Reporter: Brandon Williams
>Assignee: Brandon Williams
>Priority: Normal
> Fix For: 3.0.x, 3.11.x, 4.0.x, 4.1.x, 4.x
>
>
> https://nvd.nist.gov/vuln/detail/CVE-2022-41854



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

-
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org



[jira] [Updated] (CASSANDRA-18083) snakeyaml-1.26.jar: CVE-2022-41854

2022-11-30 Thread Brandon Williams (Jira)


 [ 
https://issues.apache.org/jira/browse/CASSANDRA-18083?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Brandon Williams updated CASSANDRA-18083:
-
Test and Documentation Plan: run CI
 Status: Patch Available  (was: Open)

> snakeyaml-1.26.jar: CVE-2022-41854
> --
>
> Key: CASSANDRA-18083
> URL: https://issues.apache.org/jira/browse/CASSANDRA-18083
> Project: Cassandra
>  Issue Type: Bug
>  Components: Dependencies
>Reporter: Brandon Williams
>Assignee: Brandon Williams
>Priority: Normal
> Fix For: 3.0.x, 3.11.x, 4.0.x, 4.1.x, 4.x
>
>
> https://nvd.nist.gov/vuln/detail/CVE-2022-41854



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

-
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org



[jira] [Updated] (CASSANDRA-18083) snakeyaml-1.26.jar: CVE-2022-41854

2022-11-30 Thread Brandon Williams (Jira)


 [ 
https://issues.apache.org/jira/browse/CASSANDRA-18083?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Brandon Williams updated CASSANDRA-18083:
-
 Bug Category: Parent values: Security(12985)Level 1 values: Denial of 
Service(13001)
   Complexity: Normal
  Component/s: Dependencies
Discovered By: User Report
 Severity: Normal
 Assignee: Brandon Williams
   Status: Open  (was: Triage Needed)

> snakeyaml-1.26.jar: CVE-2022-41854
> --
>
> Key: CASSANDRA-18083
> URL: https://issues.apache.org/jira/browse/CASSANDRA-18083
> Project: Cassandra
>  Issue Type: Bug
>  Components: Dependencies
>Reporter: Brandon Williams
>Assignee: Brandon Williams
>Priority: Normal
>
> https://nvd.nist.gov/vuln/detail/CVE-2022-41854



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

-
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org



[jira] [Updated] (CASSANDRA-18083) snakeyaml-1.26.jar: CVE-2022-41854

2022-11-30 Thread Brandon Williams (Jira)


 [ 
https://issues.apache.org/jira/browse/CASSANDRA-18083?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Brandon Williams updated CASSANDRA-18083:
-
Fix Version/s: 3.0.x
   3.11.x
   4.0.x
   4.1.x
   4.x

> snakeyaml-1.26.jar: CVE-2022-41854
> --
>
> Key: CASSANDRA-18083
> URL: https://issues.apache.org/jira/browse/CASSANDRA-18083
> Project: Cassandra
>  Issue Type: Bug
>  Components: Dependencies
>Reporter: Brandon Williams
>Assignee: Brandon Williams
>Priority: Normal
> Fix For: 3.0.x, 3.11.x, 4.0.x, 4.1.x, 4.x
>
>
> https://nvd.nist.gov/vuln/detail/CVE-2022-41854



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

-
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org