Skip to content

[CG-Fix-CVE-2021-44906] Patching on thrift.0.14.1 for package minimist (#10555)#10650

Merged
liushilongbuaa merged 1 commit intosonic-net:202111from
liushilongbuaa:202111
Apr 23, 2022
Merged

[CG-Fix-CVE-2021-44906] Patching on thrift.0.14.1 for package minimist (#10555)#10650
liushilongbuaa merged 1 commit intosonic-net:202111from
liushilongbuaa:202111

Conversation

@liushilongbuaa
Copy link
Contributor

@liushilongbuaa liushilongbuaa commented Apr 22, 2022

Why I did it

cherry-pick security related PR from master branch
#10555

How I did it

How to verify it

Which release branch to backport (provide reason below if selected)

  • 201811
  • 201911
  • 202006
  • 202012
  • 202106
  • 202111

Description for the changelog

Link to config_db schema for YANG module changes

A picture of a cute animal (not mandatory but encouraged)

sonic-net#10555)

* [CG-Fix-CVE-2021-44906] Patching on thrift.0.14.1 for package minimist

Signed-off-by: richardyu-ms <[email protected]>

* add more information in patch

Signed-off-by: richardyu-ms <[email protected]>

* Update 0003-Remove-minimist-packages.patch

* change the thrift 0.14.1 to package download

Signed-off-by: richardyu-ms <[email protected]>

* use the series file for patching

* fix a code defect
@xumia
Copy link
Collaborator

xumia commented Apr 22, 2022

@liushilongbuaa , could you please refine the PR description for the cherry-pick pr.

@liushilongbuaa liushilongbuaa changed the title [CG-Fix-CVE-2021-44906] Patching on thrift.0.14.1 for package minimis… [CG-Fix-CVE-2021-44906] Patching on thrift.0.14.1 for package minimist (#10555) Apr 22, 2022
@qiluo-msft
Copy link
Collaborator

@liushilongbuaa , could you please add the PR description: the cherry-pick PR link? Not just in the PR title.

@liushilongbuaa liushilongbuaa merged commit 4280a23 into sonic-net:202111 Apr 23, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants