ydb/contrib/libs, branch CLI_2.22.0Mirror of YDB github reposhttps://code.mastervirt.ru/ydb/atom?h=CLI_2.22.02025-05-30T07:47:42ZDeprecate contrib/libs/yajl and contrib/restricted/http-parser2025-05-30T07:47:42Zthegeorgthegeorg@yandex-team.com2025-05-30T07:25:36Zurn:sha1:8b8d94c31949c2597d5c8ed23d8b7c45de2290f5
* http-parser was explicitly deprecated: https://github.com/nodejs/http-parser
Use contrib/restricted/llhttp instead
* https://github.com/lloyd/yajl received no updates for 10 years.
Use either contrib/libs/json-c or contrib/libs/simdjson instead.
commit_hash:4be3755e7075401bf866ec2716550bec000286b1
Fix potential vulnerable cloned function2025-05-29T09:09:20Znpt-1707npthanh132@gmail.com2025-05-29T08:27:44Zurn:sha1:7f3903f18f331c5be93a476a3ffe1049b7aafaa3
* Changelog entry
Type: fix
Component: contrib/libs/yajl
Hi there,
I identified another vulnerability in a clone function yajl_string_decode() in `contrib/libs/yajl/yajl_encode.c` sourced from [brianmario/yajl-ruby](https://github.com/brianmario/yajl-ruby). This issue, originally reported in-16516](https://nvd.nist.gov/vuln/detail/CVE-2017-16516), was resolved in the repository via this commit https://github.com/brianmario/yajl-ruby/commit/a8ca8f476655adaa187eedc60bdc770fff3c51ce.
This PR applies the corresponding patch to fix the vulnerabilities in this codebase.
Please review at your convenience. Thank you!
---
Pull Request resolved: https://github.com/ytsaurus/ytsaurus/pull/1261
commit_hash:d98c6330759e2ae178b04885d9a87ca5d7f574f8
Intermediate changes2025-05-27T17:01:34Zrobot-pigletrobot-piglet@yandex-team.com2025-05-27T16:39:58Zurn:sha1:838141d227c3586d685f4766bf308ba92bcf84f8
commit_hash:4c784d04ee4b4d8786e4c4ddf0e1af3abe48f5a3
Add ftxui to YDB2025-05-26T11:34:41Zeivanov89eivanov89@yandex-team.com2025-05-26T11:08:30Zurn:sha1:87cfbf9ae62b85c094c565d0d7dc8a3526ce4fee
commit_hash:950eb4e30201bcf0d03f75074c8034665d191474
Intermediate changes2025-05-26T08:52:25Zrobot-pigletrobot-piglet@yandex-team.com2025-05-26T08:35:46Zurn:sha1:d289b87c6d760d718a2195c4ea38213b0c10d5b2
commit_hash:12fc2b708e5345ee6f0d5786530a156482c45297
Intermediate changes2025-05-23T13:38:00Zrobot-pigletrobot-piglet@yandex-team.com2025-05-23T13:26:11Zurn:sha1:969b824500454fea4fe524572add55633471e5cf
commit_hash:c008b6ddcf2fe5b1c92f66c54fac2c8c9dc7446c
Revert commit rXXXXXX, contrib/libs/grpc: Backport patch to fix race condition during openssl shutdown2025-05-23T11:26:56Zthegeorgthegeorg@yandex-team.com2025-05-23T11:00:28Zurn:sha1:0332172e69764e28c8913bb5c74a58d1fc892fbc
commit_hash:65fb8d40012f8e188efdebc8137a923db4fcc6e1
Fix inverted length check2025-05-23T09:00:17Zreshilkinreshilkin@yandex-team.com2025-05-23T08:44:21Zurn:sha1:a1c2fb3e4b8f7625f34bf2bd589577d78cb3fd02
https://github.com/grpc/grpc/issues/37969
commit_hash:5cff91206457e54004525eec93ec70c3942b7cd6
Intermediate changes2025-05-22T11:15:24Zrobot-pigletrobot-piglet@yandex-team.com2025-05-22T10:24:33Zurn:sha1:4cb99ccde48dd62f5296e5203973e345b7ae265c
commit_hash:60788997a56acd9e08cf68366cf5861243a61cba
Intermediate changes2025-05-22T10:19:34Zrobot-pigletrobot-piglet@yandex-team.com2025-05-22T10:03:31Zurn:sha1:c77c9275fd1d47b32d28772616889a217dea4b2d
commit_hash:e0cf52a226b5e624289f15b2652bebdb2f7cfe54