| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| |
|
|
|
|
|
|
| |
* http-parser was explicitly deprecated: https://github.com/nodejs/http-parser
Use contrib/restricted/llhttp instead
* https://github.com/lloyd/yajl received no updates for 10 years.
Use either contrib/libs/json-c or contrib/libs/simdjson instead.
commit_hash:4be3755e7075401bf866ec2716550bec000286b1
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Changelog entry
Type: fix
Component: contrib/libs/yajl
Hi there,
I identified another vulnerability in a clone function yajl_string_decode() in `contrib/libs/yajl/yajl_encode.c` sourced from [brianmario/yajl-ruby](https://github.com/brianmario/yajl-ruby). This issue, originally reported in-16516](https://nvd.nist.gov/vuln/detail/CVE-2017-16516), was resolved in the repository via this commit https://github.com/brianmario/yajl-ruby/commit/a8ca8f476655adaa187eedc60bdc770fff3c51ce.
This PR applies the corresponding patch to fix the vulnerabilities in this codebase.
Please review at your convenience. Thank you!
---
Pull Request resolved: https://github.com/ytsaurus/ytsaurus/pull/1261
commit_hash:d98c6330759e2ae178b04885d9a87ca5d7f574f8
|
| |
|
|
| |
commit_hash:e0258263ab376ef7b4f174017d7b241a5349329f
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
yajl_tree_parse function
### Changelog entry
...
### Changelog category
* Bugfix
### Description for reviewers
This PR fixes a security vulnerability in yajl\_tree\_parse() that was cloned from yaml but did not receive the security patch. The original issue was reported and fixed under [likema/yajl@31531a6](https://github.com/likema/yajl/commit/31531a6e6b5641398237ce15b7e62da02d975fc6).
This PR applies the same patch to eliminate the vulnerability.
References
[GHSA-cqgm-m7h3-xgwm](https://github.com/advisories/GHSA-cqgm-m7h3-xgwm "GHSA-cqgm-m7h3-xgwm")
<https://nvd.nist.gov/vuln/detail/CVE-2023-33460>
[likema/yajl@31531a6](https://github.com/likema/yajl/commit/31531a6e6b5641398237ce15b7e62da02d975fc6)
---
Pull Request resolved: <https://github.com/ydb-platform/ydb/pull/17570>
commit_hash:d022109c9836673d185db1ffab7e1064ab8f561d
|
| |
|
|
|
| |
<HIDDEN_URL>
commit_hash:c82a80ac4594723cebf2c7387dec9c60217f603e
|
| |
|
|
| |
Relates: https://st.yandex-team.ru/, https://st.yandex-team.ru/
|
| |
|
|
| |
Update tools: yexport, os-yexport
|
| | |
|
| |
|
|
| |
After this, a new target libyqlplugin.so appears. in open-source cmake build.
Diff in open-source YDB repo looks like the following: https://paste.yandex-team.ru/f302bdb4-7ef2-4362-91c7-6ca45f329264
|
| |
|
|
| |
This reverts commit ca272f12fdd0e8d5c3e957fc87939148f1caaf72, reversing
changes made to 49f8acfc8b0b5c0071b804423bcf53fda26c7c12.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
This commit is formed by the following script: https://paste.yandex-team.ru/6f92e4b8-efc5-4d34-948b-15ee2accd7e7/text.
This commit has zero effect on all projects that depend on YQL.
The summary of changes:
- `yql/providers/yt -> ydb/library/yql/providers/yt `- the whole implementation of YT provider is moved into YDB code base for further export as a part of YT YQL plugin shared library;
- `yql/providers/stat/{expr_nodes,uploader} -> ydb/library/yql/providers/stat/{expr_nodes,uploader}` - a small interface without implementation and the description of stat expr nodes;
- `yql/core/extract_predicate/ut -> ydb/library/yql/core/extract_predicate/ut`;
- `yql/core/{ut,ut_common} -> ydb/library/yql/core/{ut,ut_common}`;
- `yql/core` is gone;
- `yql/library/url_preprocessing -> ydb/library/yql/core/url_preprocessing`.
**NB**: all new targets inside `ydb/` are under `IF (NOT CMAKE_EXPORT)` clause which disables them from open-source cmake generation and ya make build. They will be enabled in the subsequent commits.
|
| | |
|
| |
|
