CVE-2019-10091 Apache Geode SSL endpoint verification vulnerability
Severity: Medium
Vendor: The Apache Software Foundation
Versions Affected:
Apache Geode 1.9.0
Description:
When TLS is enabled with ssl-endpoint-identification-enabled set to
true, Apache Geode fails to perform hostname verific
Based on the consensus in this thread, we will move forward with this
proposal. We can work out the exact mechanics after we release
v1.12.0 and move that into a support mode.
Thanks for all the feedback.
Anthony
On Fri, Feb 21, 2020 at 5:30 PM Anthony Baker wrote:
>
> Hi everyone,
>
> I'd li
Thanks Sai! Hope you are doing well.
On Wed, Mar 4, 2020 at 6:01 PM Sai Boorlagadda
wrote:
> Devs,
>
> I came across Cloudburst paper which introduces function execution
> integrated into a KV store (Anna) by Berkley folks @ RISELabs which
> resembles Geode's functions execution engine.
>
> I th
I want the check to stay required for PR merges to be allowed. I also want
it to do real work in all cases. If I can add whitespace to 25 test classes
and get a free pass, thats a big testing hole.
Remove the limit. Worst case, we have to A) bump timeouts in the future B)
put the limits back in C)
Thank you Anthony!
BRs/Jakov
On 13. 03. 2020. 13:35, Anthony Baker wrote:
Welcome Jakov! You’re all set. Please let us know if you have questions,
happy to help out!
Anthony
On Mar 13, 2020, at 4:50 AM, Jakov wrote:
Hi Geode Dev,
Could you please give me access to JIRA, so I could ass
Welcome Jakov! You’re all set. Please let us know if you have questions,
happy to help out!
Anthony
> On Mar 13, 2020, at 4:50 AM, Jakov wrote:
>
> Hi Geode Dev,
>
> Could you please give me access to JIRA, so I could assign to tickets?
> My JIRA username is "jvarenina".
>
> BRs,
>
> Jak
Hi Geode Dev,
Could you please give me access to JIRA, so I could assign to tickets?
My JIRA username is "jvarenina".
BRs,
Jakov
