Skip to content

Fix CVE 2.19 - #4694

Merged
dhrubo-os merged 5 commits into
opensearch-project:2.19from
pyek-bot:fix-cve-2.19
Mar 3, 2026
Merged

dhrubo-os merged 5 commits into
opensearch-project:2.19from
pyek-bot:fix-cve-2.19

Conversation

@pyek-bot

@pyek-bot pyek-bot commented Mar 3, 2026

Copy link
Copy Markdown
Collaborator

Description

Modifying the netty dependency to rely on the version from core.

This was done earlier: #4338
This can be considered a backport

The shadow jar changes are required due to this change in core which modified the package: opensearch-project/OpenSearch#20767

CI workflow is being triggered based on the main branch.

2.19 should not be run against Java 25. However, we are not able to run only Java 21 tests.

Running a build locally and will share the result.

Check List

  • New functionality includes testing.
  • New functionality has been documented.
  • API changes companion pull request created.
  • Commits are signed per the DCO using --signoff.
  • Public documentation issue/PR created.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

pyek-bot added 4 commits March 3, 2026 13:47
Signed-off-by: Pavan Yekbote <pybot@amazon.com>
Signed-off-by: Pavan Yekbote <pybot@amazon.com>
Signed-off-by: Pavan Yekbote <pybot@amazon.com>
Signed-off-by: Pavan Yekbote <pybot@amazon.com>
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 21:57 — with GitHub Actions Failure
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 21:57 — with GitHub Actions Failure
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 21:57 — with GitHub Actions Error
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 21:57 — with GitHub Actions Error
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env March 3, 2026 21:57 — with GitHub Actions Failure
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env March 3, 2026 21:57 — with GitHub Actions Error
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env March 3, 2026 21:57 — with GitHub Actions Failure
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env March 3, 2026 21:57 — with GitHub Actions Error
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 22:40 — with GitHub Actions Error
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 22:40 — with GitHub Actions Failure
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 22:40 — with GitHub Actions Failure
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 22:40 — with GitHub Actions Error
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 22:45 — with GitHub Actions Error
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 22:45 — with GitHub Actions Error
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 22:46 — with GitHub Actions Error
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 22:47 — with GitHub Actions Error
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 22:50 — with GitHub Actions Error
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 22:50 — with GitHub Actions Error
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 22:54 — with GitHub Actions Error
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 22:56 — with GitHub Actions Error
Signed-off-by: Pavan Yekbote <pybot@amazon.com>
@pyek-bot

pyek-bot commented Mar 3, 2026

Copy link
Copy Markdown
Collaborator Author
Screenshot 2026-03-03 at 3 32 10 PM

Build passes successfully on my local using java 21!

@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 23:33 — with GitHub Actions Failure
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 23:33 — with GitHub Actions Failure
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 23:33 — with GitHub Actions Error
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 23:33 — with GitHub Actions Error
@pyek-bot
pyek-bot had a problem deploying to ml-commons-cicd-env-require-approval March 3, 2026 23:41 — with GitHub Actions Error
@dhrubo-os
dhrubo-os merged commit ec4b196 into opensearch-project:2.19 Mar 3, 2026
13 of 22 checks passed
@pyek-bot pyek-bot mentioned this pull request Mar 3, 2026
5 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants