Skip to content

Conversation

@stephen-crawford
Copy link
Contributor

@stephen-crawford stephen-crawford commented Feb 22, 2023

Description

Flattens response times in InternalAuthBackend

This pull request resolves CVE-2023-25806 [link]

Testing

Adds a new set of tests in InternalAuthBackendTests.java

Check List

  • New functionality includes testing
  • New functionality has been documented
  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Signed-off-by: Stephen Crawford <steecraw@amazon.com>
Signed-off-by: Stephen Crawford <steecraw@amazon.com>
@stephen-crawford stephen-crawford removed the backport 2.6 backport to 2.6 branch label Feb 22, 2023
@peternied peternied merged commit 2df8acd into opensearch-project:main Feb 23, 2023
opensearch-trigger-bot bot pushed a commit that referenced this pull request Feb 23, 2023
(cherry picked from commit 2df8acd)
opensearch-trigger-bot bot pushed a commit that referenced this pull request Feb 23, 2023
(cherry picked from commit 2df8acd)
opensearch-trigger-bot bot pushed a commit that referenced this pull request Feb 23, 2023
(cherry picked from commit 2df8acd)
peternied pushed a commit that referenced this pull request Feb 23, 2023
(cherry picked from commit 2df8acd)

Co-authored-by: Stephen Crawford <65832608+scrawfor99@users.noreply.github.com>
peternied pushed a commit that referenced this pull request Feb 23, 2023
(cherry picked from commit 2df8acd)

Co-authored-by: Stephen Crawford <65832608+scrawfor99@users.noreply.github.com>
stephen-crawford added a commit that referenced this pull request Feb 27, 2023
(cherry picked from commit 2df8acd)

Co-authored-by: Stephen Crawford <65832608+scrawfor99@users.noreply.github.com>
Co-authored-by: Craig Perkins <cwperx@amazon.com>
@peternied peternied changed the title Flatten response times [CVE-2023-25806] Flatten response times Mar 1, 2023
@stephen-crawford stephen-crawford deleted the flatten-response-times branch March 2, 2023 15:00
Rishikesh1159 added a commit to Rishikesh1159/security that referenced this pull request Mar 15, 2023
MaciejMierzwa pushed a commit to MaciejMierzwa/security that referenced this pull request Apr 27, 2023
Signed-off-by: Maciej Mierzwa <dev.maciej.mierzwa@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport 1.x backport to 1.x branch backport 1.3 backport to 1.3 branch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants