Fixed CVE - issue 86 mentioned in opensearch-dsl-py repo #295
Conversation
saimedhi
requested review from
VachaShah,
dblock,
harshavamsi,
axeoman,
deztructor and
Shephalimittal
as code owners
Signed-off-by: saimedhi <[email protected]>
saimedhi
force-pushed
the
fix/dsl-cve-#86
branch
from
e9d3821 to
6259825
Compare
saimedhi
changed the title
|
To solve the following cve, "certifi" library installed in setup.py file must be >=2022.12.07 for which python version must be >=3.6. |
|
This fix would also need to go in the dsl-py repo. |
In dsl-py repo, certify is coming from opensearch-py. There is no separate installation of certify over there, as of my knowledge. |
Got it, thanks for clarifying. So the issue opensearch-project/opensearch-dsl-py#86 would only resolve when there is a new version of the opensearch-py client with this fix and that new version is used in opensearch-dsl-py. |
* Created untriaged issue workflow. (#290) Signed-off-by: dblock <[email protected]> * Removed 'out/opensearchpy' folder which was produced while generating pyi files for plugins (#288) Signed-off-by: saimedhi <[email protected]> * Merging opensearch-dsl-py to opensearch-py (#287) Signed-off-by: saimedhi <[email protected]> * Fixed CVE - issue 86 mentioned in opensearch-dsl-py repo (#295) Signed-off-by: saimedhi <[email protected]> * Removing low-level and high-level client terminology (#298) Signed-off-by: Vacha Shah <[email protected]> * Added upgrading.md file and updated it for opensearch-py 2.2.0 release (#293) Signed-off-by: saimedhi <[email protected]> --------- Signed-off-by: dblock <[email protected]> Signed-off-by: saimedhi <[email protected]> Signed-off-by: Vacha Shah <[email protected]> Co-authored-by: Daniel (dB.) Doubrovkine <[email protected]> Co-authored-by: Sai Medhini Reddy Maryada <[email protected]> Co-authored-by: Vacha Shah <[email protected]>
Description
Fixed CVE - issue 86 mentioned in opensearch-dsl-py repo
Closes opensearch-project/opensearch-dsl-py#86
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.