This is an automated email from the ASF dual-hosted git repository.
steveloughran pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/hadoop-cloudstore.git
The following commit(s) were added to refs/heads/main by this push:
new de8677a Add a switch to disable writable rpc entirely
de8677a is described below
commit de8677a16a845c3572a0af6621e14255c130dcc5
Author: Steve Loughran <[email protected]>
AuthorDate: Tue Jun 30 14:22:42 2026 +0100
Add a switch to disable writable rpc entirely
---
SECURITY.md | 2 ++
1 file changed, 2 insertions(+)
diff --git a/SECURITY.md b/SECURITY.md
index 87386c2..a0cf054 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -189,3 +189,5 @@ primarily on:
- A malicious catalog, metastore, or external service.
- A principal that already has equivalent power through legitimate write or
maintenance capabilities.
- A vulnerability that only exists in previous releases.
+
+Any deserialization vulnerability in TokenIdentifier.readFields would be
considered critical
\ No newline at end of file
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
