Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updated protobuf to 1.29.1 #35946

Merged
merged 4 commits into from
Jun 29, 2023

Conversation

michalpristas
Copy link
Contributor

Pre 1.29.1 versions of protobuf package are vulnerable to Out-of-bounds Read such that parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic.

@michalpristas michalpristas added the backport-7.17 Automated backport to the 7.17 branch with mergify label Jun 28, 2023
@michalpristas michalpristas requested a review from a team as a code owner June 28, 2023 14:12
@botelastic botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label Jun 28, 2023
@botelastic
Copy link

botelastic bot commented Jun 28, 2023

This pull request doesn't have a Team:<team> label.

@elasticmachine
Copy link
Collaborator

elasticmachine commented Jun 28, 2023

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS
Pipeline View Test View Changes Artifacts preview preview

Expand to view the summary

Build stats

  • Start Time: 2023-06-29T09:15:49.280+0000

  • Duration: 102 min 11 sec

Test stats 🧪

Test Results
Failed 0
Passed 27491
Skipped 2023
Total 29514

💚 Flaky test report

Tests succeeded.

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

  • /test : Re-trigger the build.

  • /package : Generate the packages and run the E2E tests.

  • /beats-tester : Run the installation tests with beats-tester.

  • run elasticsearch-ci/docs : Re-trigger the docs validation. (use unformatted text in the comment!)

@michalpristas michalpristas merged commit d37986c into elastic:main Jun 29, 2023
mergify bot pushed a commit that referenced this pull request Jun 29, 2023
(cherry picked from commit d37986c)

# Conflicts:
#	NOTICE.txt
#	go.mod
#	go.sum
Scholar-Li pushed a commit to Scholar-Li/beats that referenced this pull request Feb 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport-7.17 Automated backport to the 7.17 branch with mergify needs_team Indicates that the issue/PR needs a Team:* label
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants