| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
commit_hash:3a624a323006078de71f50747f7b2e8cadba7ccd
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Changelog entry
Type: fix
Component: contrib/restricted/http-parser/http_parser.c
Hi there,
I identified another vulnerability in a clone function http_parser_execute() in `contrib/restricted/http-parser/http_parser.c` sourced from [nodejs/node](https://github.com/nodejs/node). This issue, originally reported in-8287](https://nvd.nist.gov/vuln/detail/cve-2020-8287), was resolved in the repository via this commit https://github.com/nodejs/node/commit/fc70ce08f5818a286fb5899a1bc3aff5965a745e.
This PR applies the corresponding patch to fix the vulnerabilities in this codebase.
Please review at your convenience. Thank you!
---
Pull Request resolved: https://github.com/ytsaurus/ytsaurus/pull/1260
Co-authored-by: nadya02 <nadya02@yandex-team.com>
commit_hash:074ecc3485a1c90bd75678a6464ea12654804660
|
|
|
|
| |
commit_hash:c5767cc2625ee5d7a34bd8cade5a63abc114ae18
|
|
|
|
| |
commit_hash:e471d726913b0b4c84582041eeb2bd6b3cddd9df
|
|
|
|
|
| |
Update tools: ymake, os_ymake
commit_hash:aeb23ef07ed6584661225077c9d9c1b6ea95e4f2
|
|
|
|
| |
commit_hash:0b11c18439f8857ed87c57b414c62141a06720b2
|
|
|
|
| |
commit_hash:b411dd7f589541b33a2df634976790c2e0232cb0
|
|
|
|
| |
commit_hash:91fe1a3c59e708fe728a543863a327ca7d4940e7
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This also
- prohibits Python macros (PY_SRCS, PY_REGISTER and PY_MAIN) without explicit Python version
- Allows PY_SRCE for PROTO_LIBRARY by ingnoring it in all submodules except PY2_PROTO/PY3_PROTO
Known caveats:
- LIBRARY/PROGRAM still have implicit default (Python3 starting this PR), so Python version mismatches are still possible on pure C/C++ code depending on Python.
- `PY_ANY_MODULE` also switched default, but it's better to require explicit version specification somehow.
- `ALL_PY_SRCS` unlike `PY_SRCS` is not enabled in `PROTO_LIBRARY` and will produce issue of "Unknown python version". `IF (PY2_PROTO OR PY3_PROTO)` is required around such macro to be used. There is only 1 such case in Arcadia and it looks completely weird to me.
- `PYTHON_TYPE_FOR_CYTHON` is now aligned with `PYTHONx_MODULE` module, so all explicit uses are to be removed. Most probably this should be completely removed in favor of `_PYTHON_VER`, but this requires prohibition of PY_ANY_MODULE w/o version and deeper investigation on what `PYTHON_TYPE_FOR_CYTHON` actually is.
commit_hash:e6b809da1352c05e708e070a059306c19d49b53a
|
|
|
|
| |
commit_hash:ea00901b57ccbf77add24fe9e28634acf1ba557c
|
|
|
|
| |
commit_hash:346906409a1d079fede24f7660913c09b88fef1b
|
|
|
|
| |
commit_hash:d1f379976647e8cd63477ba127f38c4cdad0e8c5
|
|
|
|
| |
commit_hash:3fcaa1e051838c8efbdc08c8c6eb8493d7bc335e
|
|
|
|
| |
commit_hash:f265775e585f9eddb6bc71989ad373bb87264bfd
|
|
|
|
| |
commit_hash:84b2a5e44136cc90a98ce65cd7b82995a8a6615c
|
|
|
|
| |
commit_hash:b2c7385e46e530ef48f54c26388d1b40a4ab0cd0
|
|
|
|
| |
commit_hash:b527c60aed121bfae864558328f5bb32ee9afc72
|
|
|
|
| |
commit_hash:81b488a1edb01a141bf5c934aee3f635460f56cc
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
refactoring.
1. Unify user creation in YC IAM & OAuth authenticators.
2. Use AsyncExpiringCache instead of AuthCache in CypressUserManager.
3. Do not cache mutating requests, e.g. CreateUser in CypressUserManager.
4. Introduced compat cache config, to migrate from TAuthCache config, to TAsyncExpiringCache config.
5. Converted TString -\> std::string around those changes.
### Changelog entry
Changed caching options in config of CypressUserManager for OAuthAuthenticator.
Migrate to options compatible with AsyncExpiringCache ("expire\_after\_\*\_time"). Older options ("cache\_ttl", "optimistic\_cache\_ttl") are deprecated and wiil be removed in future versions.
commit_hash:394f3b7d28ee6117f3d46826070b1d9c5342de20
|
|
|
|
|
| |
There is no `contrib/restricted/emscripten/system/lib/libc/musl/include/sys/personality.h`.
commit_hash:58e1019d4e0410be362bec6d2845ecb7669bff86
|
|
|
|
| |
commit_hash:5baf34cc668b466cf958bf38c4384b8a8fcc8ed3
|
|
|
|
|
| |
Backport of upstream PR: \[http2\] Do not send RST\_STREAM for streams that are idle [#38881](https://github.com/grpc/grpc/pull/38881)
commit_hash:56009e2aa90a7af3528aecd0443075e0f55c5954
|
|
|
|
|
| |
Also stop pretending chunk spec replicas are annotated with media indexes.
commit_hash:9e514a2f572f305f26a367c66b3f1c133d62599a
|
|
|
|
|
| |
xfail тесты udf тоже требуют переканонизации
commit_hash:ce4ba148ea6f57536e6b674b4f2f8b7a36737bbb
|
|
|
|
| |
commit_hash:6ab3f64729fb592117da2b686bb438b2ced9130f
|
|
|
|
| |
commit_hash:09134890fc4d5d1267d6efa21bff48235205e6e5
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
<section id="quibbler-autodescription">
#### Обновление версии Google Protobuf до 2.48 📝
- 🔄 Обновлена версия Google Protobuf common до 2.48.0.
- ⚙️ Изменена переменная `JAVA_PROTO_COMMON_VERSION` на 2.9.0 в файле конфигурации.
- 📝 Обновлены зависимости в нескольких модулях, чтобы использовать новую версию Google Protobuf.
<a href="HIDDEN_URL"><font size="2">Autodescription by Code Assistant</font></a>
</section>
commit_hash:ef60aae5afe1df8dd1af4b5cabc5449118f02cf9
|
|
|
|
| |
commit_hash:7f5f02d49860d6bc8e05e637cc10b1baf450d6df
|
|
|
|
| |
commit_hash:be10be4f3d59f531f18a2065a0c01de3257e255b
|
|
|
|
| |
commit_hash:2e849d5e0055f9b839a923fb9c42f9390f37c572
|
|
|
|
| |
commit_hash:e0258263ab376ef7b4f174017d7b241a5349329f
|
|
|
|
| |
commit_hash:b9d0dab354258c30c639c4cd045b559a38836838
|
|
|
|
| |
commit_hash:3a9da34e2d4a08b0f9b0c6beb13d713002972fab
|
|
|
|
| |
commit_hash:8e91f1bc83ec2f7c5c04762b6c4a7343ab3506f2
|
|
|
|
| |
commit_hash:4a9ec647419055281b62c0093ffa27fbe9b732a9
|
|
|
|
| |
commit_hash:87b595328ea79c6ba38cb973580804486ca4a3ff
|
|
|
|
| |
commit_hash:965b2acef69f3f498322f06c527d9f628fb6d3be
|
|
|
|
|
| |
Вливать можно и сейчас, но лучше после 30 апреля.
commit_hash:8e0fcba62c3a7d6ba5ea222dc7ace9a5bc1c2535
|
|
|
|
| |
commit_hash:bf42dec7d8d3f1e4366c30b04c53e6c7cfc36858
|
|
|
|
|
|
| |
1) Be explicit about serializable types
2) In `DEFINE_ENUM`, `int` is assumed to be underlying
commit_hash:76476d7f1f0167e7127e738b261d92180281ef73
|
|
|
|
| |
commit_hash:13ef56a642595d0dc7336b790971a5ed9155163f
|
|
|
|
| |
commit_hash:40cebcf75db760d0a74e2eeb0ad2c7223a6545b4
|
|
|
|
| |
commit_hash:53941a5513167937455af000c1d0cc06d99da861
|
|
|
|
| |
commit_hash:378b763d759e24cc19f3a2be78abb336acabd083
|
|
|
|
| |
commit_hash:dbf9dd866e0de952359aa3ddeedaec31eca38959
|
|
|
|
|
| |
Added an optimizer flag to skip applying ExpandPg rules
commit_hash:4e0a9ec0487b150c75002afbee9d8cfc642a2d6b
|
|
|
|
|
| |
[nodiff:caesar]
commit_hash:48312ddf31d7bece9b834e38fc4e91254815a4d0
|
|
|
|
| |
commit_hash:3372363b71fa8e76e69df2facd026d94cdda1eeb
|
|
|
|
|
| |
Fix for library
commit_hash:4ffd5fad7dcb0fae1cd0597997304346d7ac8865
|
|
|
|
| |
commit_hash:7e97b6e8cdd2b05e53de5902441a090b8e0ffcaf
|