[jira] [Assigned] (OAK-9987) Oak-search-elastic depends on vulnerable snakeyaml version.

2022-11-08 Thread Mohit Kataria (Jira)
[ https://issues.apache.org/jira/browse/OAK-9987?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Mohit Kataria reassigned OAK-9987: -- Assignee: Mohit Kataria > Oak-search-elastic depends on vulnerable snakeyaml version. >

[jira] [Created] (OAK-9988) MergeRunnerTest leaves temp files/folders behind

2022-11-08 Thread Julian Reschke (Jira)
Julian Reschke created OAK-9988: --- Summary: MergeRunnerTest leaves temp files/folders behind Key: OAK-9988 URL: https://issues.apache.org/jira/browse/OAK-9988 Project: Jackrabbit Oak Issue Type:

[jira] [Commented] (OAK-9987) Oak-search-elastic depends on vulnerable snakeyaml version.

2022-11-08 Thread Mohit Kataria (Jira)
[ https://issues.apache.org/jira/browse/OAK-9987?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17630361#comment-17630361 ] Mohit Kataria commented on OAK-9987: elasticsearch-x-content depends on vulnerable snak

[jira] [Updated] (OAK-9987) Oak-search-elastic depends on vulnerable snakeyaml version.

2022-11-08 Thread Mohit Kataria (Jira)
[ https://issues.apache.org/jira/browse/OAK-9987?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Mohit Kataria updated OAK-9987: --- Affects Version/s: 1.44.0 > Oak-search-elastic depends on vulnerable snakeyaml version. > -

[jira] [Updated] (OAK-9987) Oak-search-elastic depends on vulnerable snakeyaml version.

2022-11-08 Thread Mohit Kataria (Jira)
[ https://issues.apache.org/jira/browse/OAK-9987?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Mohit Kataria updated OAK-9987: --- Description: Description: oak-search-elastic embeds snakeyaml-1.26.jar which is vulnerable to ID

[jira] [Updated] (OAK-9987) Oak-search-elastic depends on vulnerable snakeyaml version.

2022-11-08 Thread Mohit Kataria (Jira)
[ https://issues.apache.org/jira/browse/OAK-9987?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Mohit Kataria updated OAK-9987: --- Description: Description: oak-search-elastic embeds snakeyaml-1.26.jar which is vulnerable to CVE-2022

[jira] [Created] (OAK-9987) Oak-search-elastic depends on vulnerable snakeyaml version.

2022-11-08 Thread Mohit Kataria (Jira)
Mohit Kataria created OAK-9987: -- Summary: Oak-search-elastic depends on vulnerable snakeyaml version. Key: OAK-9987 URL: https://issues.apache.org/jira/browse/OAK-9987 Project: Jackrabbit Oak I

[jira] [Commented] (OAK-9958) Deprecate native queries

2022-11-08 Thread Mohit Kataria (Jira)
[ https://issues.apache.org/jira/browse/OAK-9958?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17630356#comment-17630356 ] Mohit Kataria commented on OAK-9958: PR: https://github.com/apache/jackrabbit-oak/pull/

[jira] [Resolved] (OAK-9958) Deprecate native queries

2022-11-08 Thread Mohit Kataria (Jira)
[ https://issues.apache.org/jira/browse/OAK-9958?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Mohit Kataria resolved OAK-9958. Fix Version/s: 1.46.0 Resolution: Fixed > Deprecate native queries >

[jira] [Commented] (OAK-7182) Make it possible to update Guava

2022-11-08 Thread Julian Reschke (Jira)
[ https://issues.apache.org/jira/browse/OAK-7182?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17630269#comment-17630269 ] Julian Reschke commented on OAK-7182: - I'm not sure yet that it is a new leakage (will

[jira] [Comment Edited] (OAK-7182) Make it possible to update Guava

2022-11-08 Thread Julian Reschke (Jira)
[ https://issues.apache.org/jira/browse/OAK-7182?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17629845#comment-17629845 ] Julian Reschke edited comment on OAK-7182 at 11/8/22 8:22 AM: --