Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix CVEs CVE-2022-42003, CVE-2021-46877, CVE-2022-42004, CVE-2020-36518 #425

Closed
wants to merge 21 commits into from
Closed

fix CVEs CVE-2022-42003, CVE-2021-46877, CVE-2022-42004, CVE-2020-36518 #425

wants to merge 21 commits into from

Commits on Dec 15, 2021

  1. CCLOG-1308: Bump connector version to address log4j CVE (#8) (#9) 

    * CCLOG-1210: Enable Jenkins

* CCLOG-1210: Validations for Splunk access (#5)

* CCLOG-1226: Remove unnecessary logs (#6)

* CCLOG-1274: Avoid logging config, data by default (#7)

* CCLOG-1308: Bump connector version to address log4j CVE
    @ragepati
    ragepati authored Dec 15, 2021
    Configuration menu
    Copy the full SHA
    40f778c View commit details
    Browse the repository at this point in the history

Commits on Dec 21, 2021

  1. CCLOG-1248: Validate Splunk host and token separately (#10)

    @ragepati
    ragepati authored Dec 21, 2021
    Configuration menu
    Copy the full SHA
    2924560 View commit details
    Browse the repository at this point in the history

Commits on Jan 5, 2022

  1. CCLOG-1248: Bump up Splunk Sink connector version (#11)

    @ragepati
    ragepati authored Jan 5, 2022
    Configuration menu
    Copy the full SHA
    dc0b459 View commit details
    Browse the repository at this point in the history

Commits on Nov 11, 2022

  1. RCCA-9576 validate in case of success response

    @naveenmall11
    naveenmall11 committed Nov 11, 2022
    Configuration menu
    Copy the full SHA
    d1e7f95 View commit details
    Browse the repository at this point in the history

Commits on Nov 14, 2022

  1. adding test

    @naveenmall11
    naveenmall11 committed Nov 14, 2022
    Configuration menu
    Copy the full SHA
    afb03b7 View commit details
    Browse the repository at this point in the history

Commits on Nov 15, 2022

  1. Merge pull request #13 from confluentinc/CCLOG-2256 

    RCCA-9576 validate in case of success response
    @naveenmall11
    naveenmall11 authored Nov 15, 2022
    Configuration menu
    Copy the full SHA
    0fec638 View commit details
    Browse the repository at this point in the history

Commits on Nov 17, 2022

  1. remove logging of record value

    @naveenmall11
    naveenmall11 committed Nov 17, 2022
    Configuration menu
    Copy the full SHA
    38486af View commit details
    Browse the repository at this point in the history

Commits on Nov 18, 2022

  1. logging kafka partition info too

    @naveenmall11
    naveenmall11 committed Nov 18, 2022
    Configuration menu
    Copy the full SHA
    d609851 View commit details
    Browse the repository at this point in the history

Commits on Nov 23, 2022

  1. Merge pull request #14 from confluentinc/CCLOG-2106 

    remove logging of record value.
    @naveenmall11
    naveenmall11 authored Nov 23, 2022
    Configuration menu
    Copy the full SHA
    2ed7c07 View commit details
    Browse the repository at this point in the history

Commits on Aug 17, 2023

  1. Added timeout to httpclient in splunk sink

    @rishabhbits038
    rishabhbits038 committed Aug 17, 2023
    Configuration menu
    Copy the full SHA
    e92cd79 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #16 from confluentinc/CC-21127 

    Added timeout to httpclient in splunk sink
    @rishabhbits038
    rishabhbits038 authored Aug 17, 2023
    Configuration menu
    Copy the full SHA
    776c603 View commit details
    Browse the repository at this point in the history

Commits on Nov 8, 2023

  1. Adding timeout for httpclient

    @rishabhbits038
    rishabhbits038 committed Nov 8, 2023
    Configuration menu
    Copy the full SHA
    5042b72 View commit details
    Browse the repository at this point in the history

Commits on Nov 20, 2023

  1. wip

    @rishabhbits038
    rishabhbits038 committed Nov 20, 2023
    Configuration menu
    Copy the full SHA
    9ac6db1 View commit details
    Browse the repository at this point in the history

Commits on Nov 21, 2023

  1. Added connection timeout and connection request timeout to http client

    @rishabhbits038
    rishabhbits038 committed Nov 21, 2023
    Configuration menu
    Copy the full SHA
    616ed6b View commit details
    Browse the repository at this point in the history

  2. Added connection timeout and connection request timeout to httpclient

    @rishabhbits038
    rishabhbits038 committed Nov 21, 2023
    Configuration menu
    Copy the full SHA
    ed1c1fd View commit details
    Browse the repository at this point in the history

  3. Merge pull request #18 from confluentinc/RCCA-15799 

    Adding timeout for httpclient
    @rishabhbits038
    rishabhbits038 authored Nov 21, 2023
    Configuration menu
    Copy the full SHA
    4fb1cba View commit details
    Browse the repository at this point in the history

Commits on Dec 4, 2023

  1. Added config to disable hostname verification (#19) 

    * Added config to disable hostname verification
    @rishabhbits038
    rishabhbits038 authored Dec 4, 2023
    Configuration menu
    Copy the full SHA
    5591baa View commit details
    Browse the repository at this point in the history

Commits on Jan 5, 2024

  1. Revert "Added config to disable hostname verification (#19)" (#20) 

    This reverts commit 5591baa.
    @rishabhbits038
    rishabhbits038 authored Jan 5, 2024
    Configuration menu
    Copy the full SHA
    cbd3e74 View commit details
    Browse the repository at this point in the history

Commits on Mar 8, 2024

  1. updated snappy-java version to 1.1.10.5 to fix CVE (#23) 

    * updated snappy.java.version to 1.1.10.4 by updating connect-plugins-parent to 0.9.23
    @rishabhbits038
    rishabhbits038 authored Mar 8, 2024
    Configuration menu
    Copy the full SHA
    bb41364 View commit details
    Browse the repository at this point in the history

  2. Fixed CVEs CVE-2022-42003, CVE-2021-46877, CVE-2022-42004, CVE-2020-3… 

    …6518
    @rishabhbits038
    rishabhbits038 committed Mar 8, 2024
    Configuration menu
    Copy the full SHA
    84079db View commit details
    Browse the repository at this point in the history

  3. updated com.fasterxml.jackson.core:jackson-databind to 2.13.5 to fix … 

    …CVEs CVE-2022-42003, CVE-2021-46877, CVE-2022-42004, CVE-2020-36518
    @rishabhbits038
    rishabhbits038 committed Mar 8, 2024
    Configuration menu
    Copy the full SHA
    e773b27 View commit details
    Browse the repository at this point in the history