[jira] [Commented] (AIRFLOW-2767) Upgrade gunicorn to 19.5.0 or greater to avoid moderate-severity CVE

2019-03-20 Thread ASF subversion and git services (JIRA) 


[ 
https://issues.apache.org/jira/browse/AIRFLOW-2767?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16797239#comment-16797239
 ] 

ASF subversion and git services commented on AIRFLOW-2767:
--

Commit f2d570385b0b7c6ca1a871bf9d92aca0231077e7 in airflow's branch 
refs/heads/v1-10-stable from RosterIn
[ https://gitbox.apache.org/repos/asf?p=airflow.git;h=f2d5703 ]

[AIRFLOW-2767] - Upgrade gunicorn to 19.5.0 to avoid moderate-severity CVE 
(#4795)

Upgrade gunicorn to 19.5.0 to avoid moderate-severity CVE

> Upgrade gunicorn to 19.5.0 or greater to avoid moderate-severity CVE
> 
>
> Key: AIRFLOW-2767
> URL: https://issues.apache.org/jira/browse/AIRFLOW-2767
> Project: Apache Airflow
>  Issue Type: Improvement
>Reporter: Siddharth Anand
>Priority: Major
> Fix For: 1.10.3
>
>
> Refer to the moderate-severity CVE in gunicorn 19.4.5 (apparently fixed in 
> 19.5.0)
> [https://nvd.nist.gov/vuln/detail/CVE-2018-1000164] 
> Currently, apache airflow's setup.py allows 19.4.0
> -s



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Commented] (AIRFLOW-2767) Upgrade gunicorn to 19.5.0 or greater to avoid moderate-severity CVE

2019-02-27 Thread ASF subversion and git services (JIRA) 


[ 
https://issues.apache.org/jira/browse/AIRFLOW-2767?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16780144#comment-16780144
 ] 

ASF subversion and git services commented on AIRFLOW-2767:
--

Commit 71140dd2dfb63f16254420b8ba3a4a62b5919f45 in airflow's branch 
refs/heads/master from RosterIn
[ https://gitbox.apache.org/repos/asf?p=airflow.git;h=71140dd ]

[AIRFLOW-2767] - Upgrade gunicorn to 19.5.0 to avoid moderate-severity CVE 
(#4795)

Upgrade gunicorn to 19.5.0 to avoid moderate-severity CVE

> Upgrade gunicorn to 19.5.0 or greater to avoid moderate-severity CVE
> 
>
> Key: AIRFLOW-2767
> URL: https://issues.apache.org/jira/browse/AIRFLOW-2767
> Project: Apache Airflow
>  Issue Type: Improvement
>Reporter: Siddharth Anand
>Assignee: Siddharth Anand
>Priority: Major
>
> Refer to the moderate-severity CVE in gunicorn 19.4.5 (apparently fixed in 
> 19.5.0)
> [https://nvd.nist.gov/vuln/detail/CVE-2018-1000164] 
> Currently, apache airflow's setup.py allows 19.4.0
> -s



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Commented] (AIRFLOW-2767) Upgrade gunicorn to 19.5.0 or greater to avoid moderate-severity CVE

2019-02-27 Thread ASF GitHub Bot (JIRA) 


[ 
https://issues.apache.org/jira/browse/AIRFLOW-2767?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16780141#comment-16780141
 ] 

ASF GitHub Bot commented on AIRFLOW-2767:
-

feng-tao commented on pull request #4795: [AIRFLOW-2767] Upgrade gunicorn to 
19.5.0 to avoid moderate-severit…
URL: https://github.com/apache/airflow/pull/4795
 
 
   
 

This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


> Upgrade gunicorn to 19.5.0 or greater to avoid moderate-severity CVE
> 
>
> Key: AIRFLOW-2767
> URL: https://issues.apache.org/jira/browse/AIRFLOW-2767
> Project: Apache Airflow
>  Issue Type: Improvement
>Reporter: Siddharth Anand
>Assignee: Siddharth Anand
>Priority: Major
>
> Refer to the moderate-severity CVE in gunicorn 19.4.5 (apparently fixed in 
> 19.5.0)
> [https://nvd.nist.gov/vuln/detail/CVE-2018-1000164] 
> Currently, apache airflow's setup.py allows 19.4.0
> -s



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

[jira] [Commented] (AIRFLOW-2767) Upgrade gunicorn to 19.5.0 or greater to avoid moderate-severity CVE

2019-02-27 Thread ASF GitHub Bot (JIRA) 


[ 
https://issues.apache.org/jira/browse/AIRFLOW-2767?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16779308#comment-16779308
 ] 

ASF GitHub Bot commented on AIRFLOW-2767:
-

RosterIn commented on pull request #4795: [AIRFLOW-2767] Upgrade gunicorn to 
19.5.0 to avoid moderate-severit…
URL: https://github.com/apache/airflow/pull/4795
 
 
   
   ### Jira
   
   - [ ] My PR addresses the following [Airflow 
Jira](https://issues.apache.org/jira/browse/AIRFLOW-2767/) issues and 
references them in the PR title. For example, "\[AIRFLOW-XXX\] My Airflow PR"
 - https://issues.apache.org/jira/browse/AIRFLOW-2767
 - In case you are fixing a typo in the documentation you can prepend your 
commit with \[AIRFLOW-XXX\], code changes always need a Jira issue.
   
   ### Description
   
   - [ ] Here are some details about my PR, including screenshots of any UI 
changes:
   
   ### Tests
   
   - [ ] My PR adds the following unit tests __OR__ does not need testing for 
this extremely good reason:
   
   ### Commits
   
   - [ ] My commits all reference Jira issues in their subject lines, and I 
have squashed multiple commits if they address the same issue. In addition, my 
commits follow the guidelines from "[How to write a good git commit 
message](http://chris.beams.io/posts/git-commit/)":
 1. Subject is separated from body by a blank line
 1. Subject is limited to 50 characters (not including Jira issue reference)
 1. Subject does not end with a period
 1. Subject uses the imperative mood ("add", not "adding")
 1. Body wraps at 72 characters
 1. Body explains "what" and "why", not "how"
   
   ### Documentation
   
   - [ ] In case of new functionality, my PR adds documentation that describes 
how to use it.
 - When adding new operators/hooks/sensors, the autoclass documentation 
generation needs to be added.
 - All the public functions and the classes in the PR contain docstrings 
that explain what it does
   
   ### Code Quality
   
   - [ ] Passes `flake8`
   
 

This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


> Upgrade gunicorn to 19.5.0 or greater to avoid moderate-severity CVE
> 
>
> Key: AIRFLOW-2767
> URL: https://issues.apache.org/jira/browse/AIRFLOW-2767
> Project: Apache Airflow
>  Issue Type: Improvement
>Reporter: Siddharth Anand
>Assignee: Siddharth Anand
>Priority: Major
>
> Refer to the moderate-severity CVE in gunicorn 19.4.5 (apparently fixed in 
> 19.5.0)
> [https://nvd.nist.gov/vuln/detail/CVE-2018-1000164] 
> Currently, apache airflow's setup.py allows 19.4.0
> -s



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)