Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update ElasticSearch client to fix vulnerability #5651

Merged
merged 2 commits into from
May 8, 2023
Merged

Update ElasticSearch client to fix vulnerability #5651

merged 2 commits into from
May 8, 2023

Conversation

solth
Copy link
Member

@solth solth commented May 4, 2023

Update ElasticSearch client library to prevent potential arbitrary code execution exploit.

@solth solth added security dependencies Pull requests that update a dependency file labels May 4, 2023
@solth solth requested a review from henning-gerhardt May 5, 2023 07:58
henning-gerhardt
henning-gerhardt reviewed May 5, 2023
View reviewed changes
pom.xml Outdated Show resolved Hide resolved
@solth solth requested a review from henning-gerhardt May 8, 2023 11:26
henning-gerhardt
henning-gerhardt approved these changes May 8, 2023
View reviewed changes
Copy link
Collaborator

@henning-gerhardt henning-gerhardt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I tested the new client version with an old (7.17.7) and new (7.17.10) ES server and I got no issues: searching, updating, indexing. But I tested this only with a few data and not with our complete data set.

@solth solth merged commit 9de520d into kitodo:master May 8, 2023
@solth solth deleted the update-es branch May 8, 2023 12:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@henning-gerhardt henning-gerhardt henning-gerhardt approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file security
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@solth @henning-gerhardt