add xpu support

Summary

Adds xpu support so all tests, benchmarks etc. run on XPUs or Intel GPUs.
Details
infer_device() function is moved to a separate file and in any file where previously "cuda" was needed, infer_device is imported and "cuda" is replaced with return value of a call to infer_device()
Testing Done

A100 80GB PCIe, RTX 3060, Intel Data Center GPU Max 1550

Hardware Type:
[x] run make test to ensure correctness
[ ] run make checkstyle to ensure code style
[x] run make test-convergence to ensure convergence

I ran the UTs on XPU, but got "Segmentation fault (core dumped)" at one test, under investigation.

Which specific Intel GPU did you test on?
Also does the test run if you just change "cuda" to "xpu" manually without using this PR?

I ran the UTs on XPU, but got "Segmentation fault (core dumped)" at one test, under investigation.

Which specific Intel GPU did you test on? Also does the test run if you just change "cuda" to "xpu" manually without using this PR?
Also: I just added xpu support to simpo_loss (which was added later on and still had "cuda" hard coded).

I use "Intel Data Center GPU Max 1550".
And I tested your latest code. All tests pass except "pytest -rA test/transformers/test_rms_norm.py::test_correctness[True-BaseRMSNorm-0.0-none-dtype1-0.2-0.02-2-128-512]", but this one is a known issue. Do you have this issue on your machine?

And I tested your latest code. All tests pass except "pytest -rA test/transformers/test_rms_norm.py::test_correctness[True-BaseRMSNorm-0.0-none-dtype1-0.2-0.02-2-128-512]", but this one is a known issue and got fixed in the latest pytorch-triton-xpu. Don't you have this issue?

I don't have this issue. It could be because I use nightly intel-xpu-backend-for-triton.
test_rms_norm.py::test_correctness[True-LlamaRMSNorm-0.0-llama-dtype0-0.0001-1e-06-2-128-512] PASSED                                                                           [  3%]
test_rms_norm.py::test_correctness[True-LlamaRMSNorm-0.0-llama-dtype0-0.0001-1e-06-5-123-123] PASSED                                                                           [  6%]
test_rms_norm.py::test_correctness[True-LlamaRMSNorm-0.0-llama-dtype1-0.2-0.02-2-128-512] PASSED                                                                               [  9%]
test_rms_norm.py::test_correctness[True-LlamaRMSNorm-0.0-llama-dtype1-0.2-0.02-5-123-123] PASSED                                                                               [ 12%]
test_rms_norm.py::test_correctness[True-GemmaRMSNorm-1.0-gemma-dtype0-0.0001-1e-06-2-128-512] PASSED                                                                           [ 15%]
test_rms_norm.py::test_correctness[True-GemmaRMSNorm-1.0-gemma-dtype0-0.0001-1e-06-5-123-123] PASSED                                                                           [ 18%]
test_rms_norm.py::test_correctness[True-GemmaRMSNorm-1.0-gemma-dtype1-0.2-0.02-2-128-512] PASSED                                                                               [ 21%]
test_rms_norm.py::test_correctness[True-GemmaRMSNorm-1.0-gemma-dtype1-0.2-0.02-5-123-123] PASSED                                                                               [ 25%]
test_rms_norm.py::test_correctness[True-BaseRMSNorm-0.0-none-dtype0-0.0001-1e-06-2-128-512] PASSED                                                                             [ 28%]
test_rms_norm.py::test_correctness[True-BaseRMSNorm-0.0-none-dtype0-0.0001-1e-06-5-123-123] PASSED                                                                             [ 31%]
test_rms_norm.py::test_correctness[True-BaseRMSNorm-0.0-none-dtype1-0.2-0.02-2-128-512] PASSED                                                                                [ 34%]
test_rms_norm.py::test_correctness[True-BaseRMSNorm-0.0-none-dtype1-0.2-0.02-5-123-123] PASSED                                                                                [ 37%]
test_rms_norm.py::test_correctness[False-LlamaRMSNorm-0.0-llama-dtype0-0.0001-1e-06-2-128-512] PASSED                                                                          [ 40%]
test_rms_norm.py::test_correctness[False-LlamaRMSNorm-0.0-llama-dtype0-0.0001-1e-06-5-123-123] PASSED                                                                          [ 43%]
test_rms_norm.py::test_correctness[False-LlamaRMSNorm-0.0-llama-dtype1-0.2-0.02-2-128-512] PASSED                                                                              [ 46%]
test_rms_norm.py::test_correctness[False-LlamaRMSNorm-0.0-llama-dtype1-0.2-0.02-5-123-123] PASSED                                                                              [ 50%]
test_rms_norm.py::test_correctness[False-GemmaRMSNorm-1.0-gemma-dtype0-0.0001-1e-06-2-128-512] PASSED                                                                          [ 53%]
test_rms_norm.py::test_correctness[False-GemmaRMSNorm-1.0-gemma-dtype0-0.0001-1e-06-5-123-123] PASSED                                                                          [ 56%]
test_rms_norm.py::test_correctness[False-GemmaRMSNorm-1.0-gemma-dtype1-0.2-0.02-2-128-512] PASSED                                                                              [ 59%]
test_rms_norm.py::test_correctness[False-GemmaRMSNorm-1.0-gemma-dtype1-0.2-0.02-5-123-123] PASSED                                                                              [ 62%]
test_rms_norm.py::test_correctness[False-BaseRMSNorm-0.0-none-dtype0-0.0001-1e-06-2-128-512] PASSED                                                                            [ 65%]
test_rms_norm.py::test_correctness[False-BaseRMSNorm-0.0-none-dtype0-0.0001-1e-06-5-123-123] PASSED                                                                            [ 68%]
test_rms_norm.py::test_correctness[False-BaseRMSNorm-0.0-none-dtype1-0.2-0.02-2-128-512] PASSED                                                                                [ 71%]
test_rms_norm.py::test_correctness[False-BaseRMSNorm-0.0-none-dtype1-0.2-0.02-5-123-123] PASSED                                                                                [ 75%]
test_rms_norm.py::test_correctness_functional[LlamaRMSNorm-0.0-llama-dtype0-0.0001-1e-06-2-2-8] PASSED                                                                         [ 78%]
test_rms_norm.py::test_correctness_functional[LlamaRMSNorm-0.0-llama-dtype0-0.0001-1e-06-9-7-41] PASSED                                                                        [ 81%]
test_rms_norm.py::test_correctness_functional[LlamaRMSNorm-0.0-llama-dtype1-0.2-0.02-2-2-8] PASSED                                                                             [ 84%]
test_rms_norm.py::test_correctness_functional[LlamaRMSNorm-0.0-llama-dtype1-0.2-0.02-9-7-41] PASSED                                                                            [ 87%]
test_rms_norm.py::test_correctness_functional[GemmaRMSNorm-1.0-gemma-dtype0-0.0001-1e-06-2-2-8] PASSED                                                                         [ 90%]
test_rms_norm.py::test_correctness_functional[GemmaRMSNorm-1.0-gemma-dtype0-0.0001-1e-06-9-7-41] PASSED                                                                        [ 93%]
test_rms_norm.py::test_correctness_functional[GemmaRMSNorm-1.0-gemma-dtype1-0.2-0.02-2-2-8] PASSED                                                                             [ 96%]
test_rms_norm.py::test_correctness_functional[GemmaRMSNorm-1.0-gemma-dtype1-0.2-0.02-9-7-41] PASSED                                                                            [100%]

And I tested your latest code. All tests pass except "pytest -rA test/transformers/test_rms_norm.py::test_correctness[True-BaseRMSNorm-0.0-none-dtype1-0.2-0.02-2-128-512]", but this one is a known issue and got fixed in the latest pytorch-triton-xpu. Don't you have this issue?

I don't have this issue. It could be because I use nightly intel-xpu-backend-for-triton.
test_rms_norm.py::test_correctness[True-LlamaRMSNorm-0.0-llama-dtype0-0.0001-1e-06-2-128-512] PASSED                                                                           [  3%]
test_rms_norm.py::test_correctness[True-LlamaRMSNorm-0.0-llama-dtype0-0.0001-1e-06-5-123-123] PASSED                                                                           [  6%]
test_rms_norm.py::test_correctness[True-LlamaRMSNorm-0.0-llama-dtype1-0.2-0.02-2-128-512] PASSED                                                                               [  9%]
test_rms_norm.py::test_correctness[True-LlamaRMSNorm-0.0-llama-dtype1-0.2-0.02-5-123-123] PASSED                                                                               [ 12%]
test_rms_norm.py::test_correctness[True-GemmaRMSNorm-1.0-gemma-dtype0-0.0001-1e-06-2-128-512] PASSED                                                                           [ 15%]
test_rms_norm.py::test_correctness[True-GemmaRMSNorm-1.0-gemma-dtype0-0.0001-1e-06-5-123-123] PASSED                                                                           [ 18%]
test_rms_norm.py::test_correctness[True-GemmaRMSNorm-1.0-gemma-dtype1-0.2-0.02-2-128-512] PASSED                                                                               [ 21%]
test_rms_norm.py::test_correctness[True-GemmaRMSNorm-1.0-gemma-dtype1-0.2-0.02-5-123-123] PASSED                                                                               [ 25%]
test_rms_norm.py::test_correctness[True-BaseRMSNorm-0.0-none-dtype0-0.0001-1e-06-2-128-512] PASSED                                                                             [ 28%]
test_rms_norm.py::test_correctness[True-BaseRMSNorm-0.0-none-dtype0-0.0001-1e-06-5-123-123] PASSED                                                                             [ 31%]
test_rms_norm.py::test_correctness[True-BaseRMSNorm-0.0-none-dtype1-0.2-0.02-2-128-512] PASSED                                                                                [ 34%]
test_rms_norm.py::test_correctness[True-BaseRMSNorm-0.0-none-dtype1-0.2-0.02-5-123-123] PASSED                                                                                [ 37%]
test_rms_norm.py::test_correctness[False-LlamaRMSNorm-0.0-llama-dtype0-0.0001-1e-06-2-128-512] PASSED                                                                          [ 40%]
test_rms_norm.py::test_correctness[False-LlamaRMSNorm-0.0-llama-dtype0-0.0001-1e-06-5-123-123] PASSED                                                                          [ 43%]
test_rms_norm.py::test_correctness[False-LlamaRMSNorm-0.0-llama-dtype1-0.2-0.02-2-128-512] PASSED                                                                              [ 46%]
test_rms_norm.py::test_correctness[False-LlamaRMSNorm-0.0-llama-dtype1-0.2-0.02-5-123-123] PASSED                                                                              [ 50%]
test_rms_norm.py::test_correctness[False-GemmaRMSNorm-1.0-gemma-dtype0-0.0001-1e-06-2-128-512] PASSED                                                                          [ 53%]
test_rms_norm.py::test_correctness[False-GemmaRMSNorm-1.0-gemma-dtype0-0.0001-1e-06-5-123-123] PASSED                                                                          [ 56%]
test_rms_norm.py::test_correctness[False-GemmaRMSNorm-1.0-gemma-dtype1-0.2-0.02-2-128-512] PASSED                                                                              [ 59%]
test_rms_norm.py::test_correctness[False-GemmaRMSNorm-1.0-gemma-dtype1-0.2-0.02-5-123-123] PASSED                                                                              [ 62%]
test_rms_norm.py::test_correctness[False-BaseRMSNorm-0.0-none-dtype0-0.0001-1e-06-2-128-512] PASSED                                                                            [ 65%]
test_rms_norm.py::test_correctness[False-BaseRMSNorm-0.0-none-dtype0-0.0001-1e-06-5-123-123] PASSED                                                                            [ 68%]
test_rms_norm.py::test_correctness[False-BaseRMSNorm-0.0-none-dtype1-0.2-0.02-2-128-512] PASSED                                                                                [ 71%]
test_rms_norm.py::test_correctness[False-BaseRMSNorm-0.0-none-dtype1-0.2-0.02-5-123-123] PASSED                                                                                [ 75%]
test_rms_norm.py::test_correctness_functional[LlamaRMSNorm-0.0-llama-dtype0-0.0001-1e-06-2-2-8] PASSED                                                                         [ 78%]
test_rms_norm.py::test_correctness_functional[LlamaRMSNorm-0.0-llama-dtype0-0.0001-1e-06-9-7-41] PASSED                                                                        [ 81%]
test_rms_norm.py::test_correctness_functional[LlamaRMSNorm-0.0-llama-dtype1-0.2-0.02-2-2-8] PASSED                                                                             [ 84%]
test_rms_norm.py::test_correctness_functional[LlamaRMSNorm-0.0-llama-dtype1-0.2-0.02-9-7-41] PASSED                                                                            [ 87%]
test_rms_norm.py::test_correctness_functional[GemmaRMSNorm-1.0-gemma-dtype0-0.0001-1e-06-2-2-8] PASSED                                                                         [ 90%]
test_rms_norm.py::test_correctness_functional[GemmaRMSNorm-1.0-gemma-dtype0-0.0001-1e-06-9-7-41] PASSED                                                                        [ 93%]
test_rms_norm.py::test_correctness_functional[GemmaRMSNorm-1.0-gemma-dtype1-0.2-0.02-2-2-8] PASSED                                                                             [ 96%]
test_rms_norm.py::test_correctness_functional[GemmaRMSNorm-1.0-gemma-dtype1-0.2-0.02-9-7-41] PASSED                                                                            [100%]

Thanks for the update. This PR looks good to me.

@faaany @mgrabban can you fix the conflict and we can merge this ASAP?

Looks good to me! @mgrabban i just invited you as the collab of this repo, can you check the email? After acceptance, can you create a new branch in the main repo, and create a new PR based on that branch? Our CI has issues currently, so any PR from external folks cannot run CI. Thanks in advance!!

Looks good to me! @mgrabban i just invited you as the collab of this repo, can you check the email? After acceptance, can you create a new branch in the main repo, and create a new PR based on that branch? Our CI has issues currently, so any PR from external folks cannot run CI. Thanks in advance!!

This is done now. See #407

This is moved to https://github.com/linkedin/Liger-Kernel/pull/407


Installation on React native

Hello,
I'm a new developer. I tried in a naive way to install redux-search on RN but I have some problems with babel presets, that I cannot to get out ...
I think it's a basic problem but I didn't find what to do to solve my problem in a clean way.
All begin with that :

Can somebody help me with this ?
Thanks

Hi @hugohow. This type of question is better suited for Stack Overflow. It doesn't seem redux-search specific, and this project is only maintained by 1 person (me). Stack Overflow has a more active community to help answer questions. 😄

I spent most of a workday trying to get redux-search working well in a React Native app, with okay-but-not-ideal results. Since this page is one of the top search results for getting redux-search working in react-native (and since StackOverflow doesn't seem to have an answer, yet) I'm braindumping some notes here in case anybody else tries this.
tl;dr: It's technically possible unless you want Workers, but it's a pain. redux-search itself is fine, but you have to make some manual modifications to get js-worker-search to run.
-- needlessly gratuitous details follow --
(I'm using<EMAIL_ADDRESS><EMAIL_ADDRESS>and<EMAIL_ADDRESS>which uses<EMAIL_ADDRESS>
js-worker-search requires babel-plugin-typecheck, babel-preset-es2015, and babel-preset-stage-0. Even though that project lists them as dependencies, I had to install each of these into my own app just to make things run.
Due to some (webpack-related?) issues with the js-worker-search package, I had to manually edit its dist/js-worker-search.js#1398: there's a line which references global.crypto -- but global is undefined when it runs. I didn't research deeply to find out why, but it seems to be a Webpack thing. Putting global && global.crypto into that conditional fixed it.
At this point it's possible to use redux-search. This was my first time using the library, and I found the live-demo code to be a bit hard to follow (since it uses the same var names for different things in different places; "map" is used for like 5 different things) -- but the actual docs were much clearer to me and everything in them seemed to work exactly as expected.
Because React Native does not provide web workers, though, js-worker-search falls back to an inline/synchronous util for its searches: this works fine, and is pretty fast even with a lot of items, but I was really hoping to do the filtering as a background/async task. I spent some time trying to get react-native-workers working as a stand-in, but ran into a host of issues: string-only messages were a mild annoyance, packager-related issues with specifying a filename to the Worker were very troublesome, some other issues required working from the js-worker-search source instead of its dist, etc -- and in the end I was not able to make it work within a reasonable amount of time.

Personally, to get redux-search working with background workers, I think it might be faster to steal the search capabilities and utils from js-worker-search, build a new Worker setup that uses them but does everything via react-native-workers instead of web workers, and then make some (small) changes to redux-search to use that in place of js-worker-search itself. This is just a vague hunch, though -- it feels like it might work and it feels like it might take less time than I spent trying to bend and locally-modify the existing libraries in-place, but I did not actually try it out.
</braindump>

Thanks for taking the time to share your findings, @spautz!
If you're ever interested in pairing on to get redux-search playing more nicely with React Native out of the box, let me know. I've written a couple of search implementations (js-worker-search, js-search) but never one that targeted native background workers. That would be a bit of an unknown area for me. But if we could get it working well enough, perhaps we could allow users to provide redux-search with their own search implementation (that meets some interface) to use instead of js-worker-search.

@bvaughn  any update to getting this lib working with react-native out of the box or easily?

Nope. Would still be interested in collaborating on that but don't really have the bandwidth to take it on myself at the moment.


Unable to save prediction dict in predict_step

In pytorch-lightning~=1.4.1 the predictions is normally saved using:
def test_step(self, batch, batch_idx):
        idx, text, true_cls = batch["idx"], batch["text"], batch["cls"]
        rpr = self.encoder(text)
        pred_cls = torch.argmax(self.cls_head(rpr), dim=-1)

        self.write_prediction_dict(
            {
                "idx": idx,
                "rpr": rpr,
                "true_cls": true_cls,
                "pred_cls": pred_cls
            },
            self.hparams.prediction.dir + self.hparams.prediction.name)

Howerver in predict_step using the same logic:
    def predict_step(self, batch, batch_idx, dataloader_idx=None):
        idx, text, true_cls = batch["idx"], batch["text"], batch["cls"]
        rpr = self.encoder(text)
        pred_cls = torch.argmax(self.cls_head(rpr), dim=-1)

        self.write_prediction_dict(
            {
                "idx": idx,
                "rpr": rpr,
                "true_cls": true_cls,
                "pred_cls": pred_cls
            },
            self.hparams.representation.dir + self.hparams.representation.name)

raises the following error message:
Traceback (most recent call last):
  File "main.py", line 151, in perform_tasks
    predict(params)
  File "main.py", line 136, in predict
    datamodule=dm
  File "/usr/local/lib/python3.7/dist-packages/pytorch_lightning/trainer/trainer.py", line 776, in predict
    results = self._run(model)
  File "/usr/local/lib/python3.7/dist-packages/pytorch_lightning/trainer/trainer.py", line 918, in _run
    self._dispatch()
  File "/usr/local/lib/python3.7/dist-packages/pytorch_lightning/trainer/trainer.py", line 984, in _dispatch
    self.accelerator.start_predicting(self)
  File "/usr/local/lib/python3.7/dist-packages/pytorch_lightning/accelerators/accelerator.py", line 98, in start_predicting
    self.training_type_plugin.start_predicting(trainer)
  File "/usr/local/lib/python3.7/dist-packages/pytorch_lightning/plugins/training_type/training_type_plugin.py", line 169, in start_predicting
    self._results = trainer.run_stage()
  File "/usr/local/lib/python3.7/dist-packages/pytorch_lightning/trainer/trainer.py", line 995, in run_stage
    return self._run_predict()
  File "/usr/local/lib/python3.7/dist-packages/pytorch_lightning/trainer/trainer.py", line 1095, in _run_predict
    return self.predict_loop.run()
  File "/usr/local/lib/python3.7/dist-packages/pytorch_lightning/loops/base.py", line 111, in run
    self.advance(*args, **kwargs)
  File "/usr/local/lib/python3.7/dist-packages/pytorch_lightning/loops/dataloader/prediction_loop.py", line 92, in advance
    dataloader_iter, self.current_dataloader_idx, dl_max_batches, self.num_dataloaders, self.return_predictions
  File "/usr/local/lib/python3.7/dist-packages/pytorch_lightning/loops/base.py", line 111, in run
    self.advance(*args, **kwargs)
  File "/usr/local/lib/python3.7/dist-packages/pytorch_lightning/loops/epoch/prediction_epoch_loop.py", line 98, in advance
    self._predict_step(batch, batch_idx, dataloader_idx)
  File "/usr/local/lib/python3.7/dist-packages/pytorch_lightning/loops/epoch/prediction_epoch_loop.py", line 131, in _predict_step
    predictions = self.trainer.accelerator.predict_step(step_kwargs)
  File "/usr/local/lib/python3.7/dist-packages/pytorch_lightning/accelerators/accelerator.py", line 241, in predict_step
    return self.training_type_plugin.predict_step(*step_kwargs.values())
  File "/usr/local/lib/python3.7/dist-packages/pytorch_lightning/plugins/training_type/training_type_plugin.py", line 184, in predict_step
    return self.model.predict_step(*args, **kwargs)
  File "/content/TeCBench/source/model/TeCModel.py", line 97, in predict_step
    self.hparams.representation.dir + self.hparams.representation.name)
  File "/usr/local/lib/python3.7/dist-packages/pytorch_lightning/core/lightning.py", line 605, in write_prediction_dict
    self.write_prediction(k, v, filename)
  File "/usr/local/lib/python3.7/dist-packages/pytorch_lightning/core/lightning.py", line 578, in write_prediction
    self.trainer._evaluation_loop.predictions._add_prediction(name, value, filename)
  File "/usr/local/lib/python3.7/dist-packages/pytorch_lightning/trainer/properties.py", line 606, in _evaluation_loop
    raise RuntimeError("The `Trainer._evaluation_loop` property isn't defined. Accessed outside of scope")
RuntimeError: The `Trainer._evaluation_loop` property isn't defined. Accessed outside of scope

is this related also to #8875?

Hello @Borda,
These two issues have the same objective: save the prediction dictionary. In #8875, I was thinking about the new feature using  BasePredictionWriter callback, and here, I was unable to save predictions dictionary using write_prediction_dict which is available in PL 1.4.1.

Dear @celsofranssa,
Yes, I would recommend to use the BasePredictionWriter, this is safer and would work better depending on which accelerators you might be using.
Best,
T.C

Thank you @tchaton,
Currently, I am trying to apply BasePredictionWriter to save the predictions as it was done using write_prediction_dict (#8875 ).


Documentation?

Hi,
Good day.
"Go to the AWS Mobile Docs to learn more about the usage of the awsmobile-cli and some sample codes to get your app up and running."
That links you to amplify cli? Where have the docs gone?
Regards.

I'm starting to notice some redirects in the docs as I follow them. Is awsmobile-cli being decommissioned and replaced by amplify?

I have no idea, but not a cool way to do things. How do we migrate an existing app. I'm setting up all the same stuff again! :(

I lost about a day on this as well. If Amazon is in a transition period from awsmobile-cli to amplify that's fine just please make it clear. I created several amplify projects and couldn't figure out why they weren't showing up in MobileHub like awsmobile-cli projects used to do. Very frustrating. re:Invent is about three months away perhaps they're waiting for some big announcement that Amplify is replacing MobileHub or something.

I fully agree man, just some communication would be great. It’s very frustrating. Trying to use this for a production application but it feels like the tools are in alpha!
Sent from my iPhone

On 26 Aug 2018, at 03:30, Ryan Marsh<EMAIL_ADDRESS>wrote:
I lost about a day on this as well. If Amazon is in a transition period from awsmobile-cli to amplify that's fine just please make it clear. I created several amplify projects and couldn't figure out why they weren't showing up in MobileHub like awsmobile-cli projects used to do. Very frustrating. re:Invent is about three months away perhaps they're waiting for some big announcement that Amplify is replacing MobileHub or something.
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub, or mute the thread.

@jarrettj @ryanwmarsh sorry for the confusion! Please check out our latest announcement: https://aws.amazon.com/blogs/mobile/announcing-the-aws-amplify-cli-toolchain/
The relevant bits: "Existing Mobile Hub projects continue to work without requiring any app changes. If you’re using the AWS Mobile CLI for existing projects, you can also continue to use that older CLI. However, going forward, new features will be added to the AWS Amplify CLI toolchain which does not use Mobile Hub."
You can continue to use the AWS Mobile CLI for your existing projects (and it'll work with mobile hub in the same way), but for new projects we recommend starting here: https://aws-amplify.github.io/media/get_started

I think this is safe to close re: @swaminator's comment

I'm missing a migration path to amplify-cli

Definitely frustrating to have to go and learn something new when every AWS product takes such an investment to learn to proficiency. Not sure if it makes sense to choose Amazon cli tools for things like this if ya'll are going to up and reinvent the wheel every year or so... would be nice if you guys could invest in making ONE production-ready, fully-featured tool instead of multiple almost-there solutions to the same problems.


Faytech touchscreen fix

see https://at.projects.genivi.org/jira/browse/GDP-233 [GDP-233]

Others are fine to me. Could you add jira number and title in commit?

I tested this PR, it works fine.


Adjust Scheduled Tasks to Support Single "Run on Server"

Description of problem
Currently, DNN Platform allows you to set a task to run on a named "list" of servers OR all servers.  This creates a unique management issue and with the proposed changes in #5575 makes the management of set tasks harder.
Description of solution
The UI should be updated to only allow the specification of a SINGLE server name or not specified (all).
Description of alternatives considered
We could support multiple servers, however, looking at what is done, the key differentiation/feature is that you either run something everywhere.  For example purge log.  Or you have items that interact with the database and need to be executed once such as search scheduler.

A workaround for this was implemented with the ability to rename automatically.


Top selection sometimes gets cut off on mobile

This issue is easy to recreate by scrolling down after you reached the bottom of the page already. This sometimes happens for no apparant reason aswell

should be fixed with:
https://github.com/dustinengle/blockex/commit/eddeca582cf727f67712b125b6744793c28fff02#diff-d627080f480f213404b16c7b2b0f27d7


Changelog

Please can you add a changelog. I get nervous upgrading versions when I don't know what has changed and in what way it may impact my application. Other than that - good work!

Hello @joergd thanks for the reminder. This will be added to the upcoming new documentation.

Awesome, thank you.

On 31 Oct 2020, at 07:47, Jofferson Ramirez Tiquez<EMAIL_ADDRESS>wrote:
Hello @joergd thanks for the reminder. This will be added to the upcoming new documentation.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub, or unsubscribe.


Set permissions for syncs to non-jhudsl repos

Is your feature request related to a problem?
https://github.com/jhudsl/OTTR_Template/actions/runs/1689833133
The sync pr GitHub action doesn’t work for non jhudsl repos because of lack of permission.
So we need to figure out how to set the permissions correctly for syncs
Might be as simple as adding jhudsl or something as an external collaborator.

Happy to help test this out for OCS!

This is addressed by #389 and #387

I'll reopen if it breaks


Kiosk mode

I also need to run an Android app in kiosk mode.
This code looks like it covers the basics.
But I am wondering if you eventually used this in production as getting this working fully can be tricky.

Yes I eventually used it in production.

https://proandroiddev.com/reacting-to-loss-of-user-interaction-in-an-android-kiosk-app-da5c6f7e710c


Read secrets from kube system

In our environment, we don't want to deploy the Secret object with the cluster credentials to each and every namespace using this storage provisioner.
This patch adds a new configuration option secretFromSystem (boolean). If this flag is enabled, it will always search for the Secret object in the kube-system namespace, so our end users don't need to need to deploy a Secret object in their namespaces.
Another option would be to specify a namespace instead of a boolean flag.

LGTM, thanks!
@sanyu could you describe new options in vzstorage-pd/README.md?


setup_gammadelta_db.py issue

Hi there,
When I setup gammadelta database, I found in line 66 still set your own path. It might better provide file in github.
Best,
Yan

Hi Yan-- sorry for the confusion. That script ("setup_gammadelta_db.py") was just for making the database file, it's not needed anymore. To analyze gamma deltas you just need to uncomment this line:
https://github.com/phbradley/tcr-dist/blob/master/basic.py#L36
and comment out this line
https://github.com/phbradley/tcr-dist/blob/master/basic.py#L35
The database file ("gammadelta_db.tsv") is already in the db/ directory after you run setup.py.

many thanks! I might use the old version so I construct "gammadelta_db.tsv" by myself.


fix: Allow Ctrl+Click on variants for opening in new tab

On Linux and Windows systems, links can be opened in new tabs by holding Ctrl and then left clicking.
This PR allows this default browser behavior for variant links in the sidebar tree navigation.

❤ Thank you!


Extract createLinkInfo and apiErrorMessage, and use preventDefault() in onclick

These functions will be used to implement the upcoming delete API handler.
This change pares down the number of createLink test cases, since the apiErrorMessage test cases cover every API failure condition at a lower level.
Also, calling event.preventDefault()  is apparently more conformant to the DOM Events standard than returning false.

Coverage increased (+0.01%) to 98.021% when pulling d1b9fc301b2bb6bee022e762a7d6e4d31958deb8 on extract-api-helpers into f7ad909f3221581dc37ce8b94e63c9b832f77b74 on master.

Coverage increased (+0.01%) to 98.021% when pulling d1b9fc301b2bb6bee022e762a7d6e4d31958deb8 on extract-api-helpers into f7ad909f3221581dc37ce8b94e63c9b832f77b74 on master.

Coverage increased (+0.01%) to 98.021% when pulling 4193be0c098fc0d6e0183356240ffdbfb0de59c9 on extract-api-helpers into f7ad909f3221581dc37ce8b94e63c9b832f77b74 on master.

Coverage increased (+0.01%) to 98.021% when pulling 4193be0c098fc0d6e0183356240ffdbfb0de59c9 on extract-api-helpers into f7ad909f3221581dc37ce8b94e63c9b832f77b74 on master.


Update aws-sdk from v2 to v3

V2 of the AWS SDK is reaching end of life. This migrates any AWS S3 functionality to the V3 version.
To confirm the upload executed successfully, the CI deployment should be valid.

Thanks for the pull request @ggetz!

:heavy_check_mark: Signed CLA found.
:grey_question: CHANGES.md was not updated.

If this change updates the public API in any way, please add a bullet point to CHANGES.md.

:grey_question: Unit tests were not updated.

Make sure you've updated tests to reflect your changes, added tests for any new code, and ran the code coverage tool.

Reviewers, don't forget to make sure that:

[ ] Cesium Viewer works.
[ ] Works in 2D/CV.

Looks good, thanks @ggetz!


0.3.1 not working in Mac Catalina 10.15.7

Describe the bug
I try to install 0.3.1 on my mac. It is unresponsive and can't show me a window.
Expected behavior
The app opens and shows me a window.
To Reproduce
Mac Intel
macOS Catalina 10.15.7

Download bloop_0.3.1_x64.dmg
Drag the app to the Applications folder and Open the app with spotlight search.

Screenshots or output

Additional context
None.

Same error. The application icon bounces for a bit in the dock, and then just vanishes.
MacOS Big Sur (11.4)
Macbook Air (M1, 2020)

Hi @Shomvel, bloop is only compatible with MacOS 12+. This is because one of bloop's dependencies - Qdrant - is dependent on MacOS 12+.

Hi @Shomvel, bloop is only compatible with MacOS 12+. This is because one of bloop's dependencies - Qdrant - is dependent on MacOS 12+.

Maybe you should be clear about this :/ Cross out app icon if it's detected that macOS version is incompatible, or specify it in the doc. Is supporting FAISS or HNSW feasible btw?

It is unlikely we'll support macOS versions older than 11, but 0.3.2 will support macOS 11.

@rsdy you said that 0.3.2 will support macOS 11, but the release page has download for macOS 12+


Undoing guide creation makes empty array in scene file

Godot version
4.2 dev3
System information
Windows 10.0.19045 - Vulkan (Forward+) - dedicated NVIDIA GeForce GTX 1060 (NVIDIA; <IP_ADDRESS>3) - Intel(R) Core(TM) i7-7700HQ CPU @ 2.80GHz (8 Threads)
Issue description
Basically variation of #33995
Steps to reproduce

Open 2D scene
Drag a guide
Undo
Save

Minimal reproduction project
N/A

relevant code
https://github.com/godotengine/godot/blob/6758a7f8c07d1f4c8ec4f052ded6d26402967ebe/editor/plugins/canvas_item_editor_plugin.cpp#L1143


A small suggestion

I suggest setting the shortcut key for adding the matrix（w） to a key near enter, which may be more convenient, otherwise it is tiring to press w and then press enter with one hand.

Why press enter?
Usually it's (w) -> draw box with mouse -> (d) to get to next image -> (w) again


[BUG] CVE vulnerabilities in com.microsoft.azure:azure-eventgrid

Describe the bug
The SDK library for Microsoft Azure Eventgrid contains a couple security vulnerabilities that have been fixed/updated in a newer version of azure-client-runtime.
Exception or Stack Trace
"Project","ScanDate","DependencyName","DependencyPath","Description","License","Md5","Sha1","Identifiers","CPE","CVE","CWE","Vulnerability","Source","CVSSv2_Severity","CVSSv2_Score","CVSSv2","CVSSv3_BaseSeverity","CVSSv3_BaseScore","CVSSv3","CPE Confidence","Evidence Count"
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",guava-20.0.jar,/home/archcry/.m2/repository/com/google/guava/guava/20.0/guava-20.0.jar,"Guava is a suite of core and expanded libraries that include     utility classes, google's collections, io classes, and much     much more.      Guava has only one code dependency - javax.annotation,     per the JSR-305 spec.",http://www.apache.org/licenses/LICENSE-2.0.txt,f32a8a2524620dbecc9f6bf6a20c293f,89507701249388e1ed5ddcf8c41f4ce1be7831ef,pkg:maven/com.google.guava/guava@20.0,cpe:2.3:a:google:guava:20.0:*:*:*:*:*:*:*,CVE-2018-10237,CWE-502 Deserialization of Untrusted Data,"Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable.",NVD,MEDIUM,4.3,/AV:N/AC:M/Au:N/C:N/I:N/A:P,MEDIUM,5.9,/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H,HIGH,24
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",retrofit-2.1.0.jar,/home/archcry/.m2/repository/com/squareup/retrofit2/retrofit/2.1.0/retrofit-2.1.0.jar,"","",9e42632359093667f096c532b1261eae,2de7cd8b95b7021b1d597f049bcb422055119f2c,pkg:maven/com.squareup.retrofit2/retrofit@2.1.0,cpe:2.3:a:squareup:retrofit:2.1.0:*:*:*:*:*:*:*,CVE-2018-1000850,CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'),"Square Retrofit version versions from (including) 2.0 and 2.5.0 (excluding) contains a Directory Traversal vulnerability in RequestBuilder class, method addPathParameter that can result in By manipulating the URL an attacker could add or delete resources otherwise unavailable to her.. This attack appear to be exploitable via An attacker should have access to an encoded path parameter on POST, PUT or DELETE request.. This vulnerability appears to have been fixed in 2.5.0 and later.",NVD,MEDIUM,6.4,/AV:N/AC:L/Au:N/C:N/I:N/A:P,HIGH,7.5,/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N,HIGH,20
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",okhttp-3.4.2.jar,/home/archcry/.m2/repository/com/squareup/okhttp3/okhttp/3.4.2/okhttp-3.4.2.jar,"","",cb9eaa81c95d740ab2f8bd082e56c4c5,ccde00f7ccc77af5a6d5752e2cb21f6d8998289f,pkg:maven/com.squareup.okhttp3/okhttp@3.4.2,"cpe:2.3:a:squareup:okhttp:3.4.2:*:*:*:*:*:*:*, cpe:2.3:a:squareup:okhttp3:3.4.2:*:*:*:*:*:*:*",CVE-2018-20200,CWE-254 7PK - Security Features,** DISPUTED ** CertificatePinner.java in OkHttp 3.x through 3.12.0 allows man-in-the-middle attackers to bypass certificate pinning by changing SSLContext and the boolean values while hooking the application. NOTE: This id is disputed because some parties don't consider this is a vulnerability. Their rationale can be found in https://github.com/square/okhttp/issues/4967.,NVD,MEDIUM,4.3,/AV:N/AC:M/Au:N/C:P/I:P/A:N,MEDIUM,5.9,/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N,HIGH,20
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",logging-interceptor-3.4.2.jar,/home/archcry/.m2/repository/com/squareup/okhttp3/logging-interceptor/3.4.2/logging-interceptor-3.4.2.jar,"","",204c97d6ea5b8f43b34b0c99cd8d4041,d99260c62d97beae99ed1f779a35a9bf48c094a6,pkg:maven/com.squareup.okhttp3/logging-interceptor@3.4.2,"cpe:2.3:a:squareup:okhttp:3.4.2:*:*:*:*:*:*:*, cpe:2.3:a:squareup:okhttp3:3.4.2:*:*:*:*:*:*:*",CVE-2018-20200,CWE-254 7PK - Security Features,** DISPUTED ** CertificatePinner.java in OkHttp 3.x through 3.12.0 allows man-in-the-middle attackers to bypass certificate pinning by changing SSLContext and the boolean values while hooking the application. NOTE: This id is disputed because some parties don't consider this is a vulnerability. Their rationale can be found in https://github.com/square/okhttp/issues/4967.,NVD,MEDIUM,4.3,/AV:N/AC:M/Au:N/C:P/I:P/A:N,MEDIUM,5.9,/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N,HIGH,22
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",converter-jackson-2.1.0.jar,/home/archcry/.m2/repository/com/squareup/retrofit2/converter-jackson/2.1.0/converter-jackson-2.1.0.jar,"","",2a99e66ead438dd054375c3a6b6e37b4,ef33476a62d9c62dfca6b6c9e086f2e3343a96f4,pkg:maven/com.squareup.retrofit2/converter-jackson@2.1.0,cpe:2.3:a:squareup:retrofit:2.1.0:*:*:*:*:*:*:*,CVE-2018-1000850,CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'),"Square Retrofit version versions from (including) 2.0 and 2.5.0 (excluding) contains a Directory Traversal vulnerability in RequestBuilder class, method addPathParameter that can result in By manipulating the URL an attacker could add or delete resources otherwise unavailable to her.. This attack appear to be exploitable via An attacker should have access to an encoded path parameter on POST, PUT or DELETE request.. This vulnerability appears to have been fixed in 2.5.0 and later.",NVD,MEDIUM,6.4,/AV:N/AC:L/Au:N/C:N/I:N/A:P,HIGH,7.5,/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N,HIGH,26
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2017-15095,CWE-502 Deserialization of Untrusted Data,"A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously. \",NVD,HIGH,7.5,/AV:N/AC:L/Au:N/C:P/I:P/A:P,CRITICAL,9.8,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2017-17485,"","FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the Spring libraries are available in the classpath.",OSSINDEX,"","","",CRITICAL,9.8,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2017-7525,CWE-502 Deserialization of Untrusted Data,"A deserialization flaw was discovered in the jackson-databind, versions before <IP_ADDRESS>, <IP_ADDRESS> and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.",NVD,HIGH,7.5,/AV:N/AC:L/Au:N/C:P/I:P/A:P,CRITICAL,9.8,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2018-1000873,CWE-20 Improper Input Validation,"Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS). This attack appear to be exploitable via The victim deserializes malicious input, specifically very large values in the nanoseconds field of a time value. This vulnerability appears to have been fixed in 2.9.8.",NVD,MEDIUM,4.3,/AV:N/AC:M/Au:N/C:N/I:N/A:P,MEDIUM,6.5,/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2018-11307,CWE-502 Deserialization of Untrusted Data,"An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in <IP_ADDRESS>, <IP_ADDRESS>, and 2.9.6.",NVD,HIGH,7.5,/AV:N/AC:L/Au:N/C:P/I:P/A:P,CRITICAL,9.8,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2018-12022,CWE-502 Deserialization of Untrusted Data,"An issue was discovered in FasterXML jackson-databind prior to <IP_ADDRESS>, <IP_ADDRESS>, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Jodd-db jar (for database access for the Jodd framework) in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.",NVD,MEDIUM,5.1,/AV:N/AC:H/Au:N/C:P/I:P/A:P,HIGH,7.5,/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2018-12023,CWE-502 Deserialization of Untrusted Data,"An issue was discovered in FasterXML jackson-databind prior to <IP_ADDRESS>, <IP_ADDRESS>, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Oracle JDBC jar in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload.",NVD,MEDIUM,5.1,/AV:N/AC:H/Au:N/C:P/I:P/A:P,HIGH,7.5,/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2018-14718,CWE-502 Deserialization of Untrusted Data,FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.,NVD,HIGH,7.5,/AV:N/AC:L/Au:N/C:P/I:P/A:P,CRITICAL,9.8,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2018-14719,CWE-502 Deserialization of Untrusted Data,FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.,NVD,HIGH,7.5,/AV:N/AC:L/Au:N/C:P/I:P/A:P,CRITICAL,9.8,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2018-14720,CWE-611 Improper Restriction of XML External Entity Reference ('XXE'),FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization.,NVD,HIGH,7.5,/AV:N/AC:L/Au:N/C:P/I:P/A:P,CRITICAL,9.8,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2018-14721,CWE-918 Server-Side Request Forgery (SSRF),FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization.,NVD,HIGH,7.5,/AV:N/AC:L/Au:N/C:P/I:P/A:P,CRITICAL,10.0,/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2018-19360,CWE-502 Deserialization of Untrusted Data,FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.,NVD,HIGH,7.5,/AV:N/AC:L/Au:N/C:P/I:P/A:P,CRITICAL,9.8,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2018-19361,CWE-502 Deserialization of Untrusted Data,FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.,NVD,HIGH,7.5,/AV:N/AC:L/Au:N/C:P/I:P/A:P,CRITICAL,9.8,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2018-19362,CWE-502 Deserialization of Untrusted Data,FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.,NVD,HIGH,7.5,/AV:N/AC:L/Au:N/C:P/I:P/A:P,CRITICAL,9.8,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2018-5968,"CWE-502 Deserialization of Untrusted Data, CWE-184 Incomplete Blacklist",FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist.,NVD,MEDIUM,5.1,/AV:N/AC:H/Au:N/C:P/I:P/A:P,HIGH,8.1,/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2018-7489,"CWE-502 Deserialization of Untrusted Data, CWE-184 Incomplete Blacklist","FasterXML jackson-databind before <IP_ADDRESS>, 2.8.x before <IP_ADDRESS> and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath.",NVD,HIGH,7.5,/AV:N/AC:L/Au:N/C:P/I:P/A:P,CRITICAL,9.8,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2019-12086,CWE-200 Information Exposure,"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker can host a crafted MySQL server reachable by the victim, an attacker can send a crafted JSON message that allows them to read arbitrary local files on the server. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin validation.",NVD,MEDIUM,5.0,/AV:N/AC:L/Au:N/C:P/I:P/A:N,HIGH,7.5,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2019-12384,CWE-502 Deserialization of Untrusted Data,"FasterXML jackson-databind 2.x before <IP_ADDRESS> might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible.",NVD,MEDIUM,4.3,/AV:N/AC:M/Au:N/C:P/I:P/A:N,MEDIUM,5.9,/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2019-12814,CWE-200 Information Exposure,"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has JDOM 1.x or 2.x jar in the classpath, an attacker can send a specifically crafted JSON message that allows them to read arbitrary local files on the server.",NVD,MEDIUM,4.3,/AV:N/AC:M/Au:N/C:P/I:P/A:N,MEDIUM,5.9,/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2019-14379,CWE-20 Improper Input Validation,"SubTypeValidator.java in FasterXML jackson-databind before <IP_ADDRESS> mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution.",NVD,HIGH,7.5,/AV:N/AC:L/Au:N/C:P/I:P/A:P,CRITICAL,9.8,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2019-14439,CWE-200 Information Exposure,A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before <IP_ADDRESS>. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.,NVD,MEDIUM,5.0,/AV:N/AC:L/Au:N/C:P/I:P/A:N,HIGH,7.5,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2019-14540,CWE-20 Improper Input Validation,A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.,NVD,HIGH,7.5,/AV:N/AC:L/Au:N/C:P/I:P/A:P,CRITICAL,9.8,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2019-16335,CWE-20 Improper Input Validation,A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.,NVD,HIGH,7.5,/AV:N/AC:L/Au:N/C:P/I:P/A:P,CRITICAL,9.8,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2019-16942,CWE-20 Improper Input Validation,"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling.",NVD,HIGH,7.5,/AV:N/AC:L/Au:N/C:P/I:P/A:P,CRITICAL,9.8,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2019-16943,CWE-20 Improper Input Validation,"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of com.p6spy.engine.spy.P6DataSource mishandling.",NVD,HIGH,7.5,/AV:N/AC:L/Au:N/C:P/I:P/A:P,CRITICAL,9.8,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2019-17267,CWE-20 Improper Input Validation,A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.,NVD,HIGH,7.5,/AV:N/AC:L/Au:N/C:P/I:P/A:P,CRITICAL,9.8,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2019-17531,CWE-20 Improper Input Validation,"A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload.",NVD,HIGH,7.5,/AV:N/AC:L/Au:N/C:P/I:P/A:P,CRITICAL,9.8,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CVE-2019-20330,CWE-502 Deserialization of Untrusted Data,FasterXML jackson-databind 2.x before <IP_ADDRESS> lacks certain net.sf.ehcache blocking.,NVD,HIGH,7.5,/AV:N/AC:L/Au:N/C:P/I:P/A:P,CRITICAL,9.8,/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",jackson-databind-2.7.2.jar,/home/archcry/.m2/repository/com/fasterxml/jackson/core/jackson-databind/2.7.2/jackson-databind-2.7.2.jar,General data-binding functionality for Jackson: works on core streaming API,http://www.apache.org/licenses/LICENSE-2.0.txt,b5b3f1833fde1b70db5ea821cb0ceda1,84ffa765dd258dbab8695963c41308b054f3a1cb,pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.7.2,"cpe:2.3:a:fasterxml:jackson:2.7.2:*:*:*:*:*:*:*, cpe:2.3:a:fasterxml:jackson-databind:2.7.2:*:*:*:*:*:*:*",CWE-611: Improper Restriction of XML External Entity Reference ('XXE'),CWE-611 Improper Restriction of XML External Entity Reference ('XXE'),"The software processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.",OSSINDEX,"","","",MEDIUM,5.4,/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N,HIGH,40
Microsoft Azure SDK for eventgrid,"Tue, 18 Feb 2020 09:26:58 +0100",adapter-rxjava-2.1.0.jar,/home/archcry/.m2/repository/com/squareup/retrofit2/adapter-rxjava/2.1.0/adapter-rxjava-2.1.0.jar,"","",2c148d6edaddd4dc63e00947550e1bd5,693eddc23e87ab13f9cf5001707ce8e7e1d1ff01,pkg:maven/com.squareup.retrofit2/adapter-rxjava@2.1.0,cpe:2.3:a:squareup:retrofit:2.1.0:*:*:*:*:*:*:*,CVE-2018-1000850,CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'),"Square Retrofit version versions from (including) 2.0 and 2.5.0 (excluding) contains a Directory Traversal vulnerability in RequestBuilder class, method addPathParameter that can result in By manipulating the URL an attacker could add or delete resources otherwise unavailable to her.. This attack appear to be exploitable via An attacker should have access to an encoded path parameter on POST, PUT or DELETE request.. This vulnerability appears to have been fixed in 2.5.0 and later.",NVD,MEDIUM,6.4,/AV:N/AC:L/Au:N/C:N/I:N/A:P,HIGH,7.5,/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N,HIGH,26

To Reproduce
Steps to reproduce the behavior:
cd sdk/eventgrid/microsoft-azure-eventgrid/
mvn compile org.owasp:dependency-check-maven:aggregate

Setup (please complete the following information):

OS: Archlinux
IDE : IntelliJ
1.3.0

Additional context
Updating azure-client-runtime to version 1.7.1 resolves most but not all CVE issues. When updating to 1.7.1 some jackson issues remain. These dependencies should be updated in com.microsoft.rest:client-runtime.
Information Checklist
Kindly make sure that you have added all the following information above and checkoff the required fields otherwise we will treat the issuer as an incomplete report

[x] Bug Description Added
[x] Repro Steps Added
[x] Setup information Added

Assigning to @conniey as she's looking at this all-up for the repo.


[BL602]add configuration to change ota periodic query timeout value

Problem

Test case [TC-SU-2.8] requires a lower value of OTA periodic query timeout, default value is 24 hours, so add a configuration to change it.

Change overview
add configuration to change ota periodic query timeout value
Testing
test TC-SU-2.8 passed

Fast tracking platform changes


[WIP] DestinationRule validation against no CaCertificate with SIMPLE/MUTUAL mode

Ref: https://github.com/istio/istio/issues/25652
Let's see if this breaks the CI

@nschhina: The following test failed, say /retest to rerun all failed tests:

Test name
Commit
Details
Rerun command

release-notes_istio
c05ca8c36130620bf06b408dcc781cc62ee50502
link
/test release-notes_istio

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@nschhina: The following tests failed, say /retest to rerun all failed tests:

Test name
Commit
Details
Rerun command

release-notes_istio
c05ca8c36130620bf06b408dcc781cc62ee50502
link
/test release-notes_istio

lint_istio
c05ca8c36130620bf06b408dcc781cc62ee50502
link
/test lint_istio

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@nschhina: The following tests failed, say /retest to rerun all failed tests:

Test name
Commit
Details
Rerun command

release-notes_istio
c05ca8c36130620bf06b408dcc781cc62ee50502
link
/test release-notes_istio

lint_istio
c05ca8c36130620bf06b408dcc781cc62ee50502
link
/test lint_istio

unit-tests_istio
c05ca8c36130620bf06b408dcc781cc62ee50502
link
/test unit-tests_istio

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

/test unit-tests_istio

@nschhina: The following tests failed, say /retest to rerun all failed tests:

Test name
Commit
Details
Rerun command

release-notes_istio
c05ca8c36130620bf06b408dcc781cc62ee50502
link
/test release-notes_istio

lint_istio
c05ca8c36130620bf06b408dcc781cc62ee50502
link
/test lint_istio

unit-tests_istio
c05ca8c36130620bf06b408dcc781cc62ee50502
link
/test unit-tests_istio

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@nschhina: The following tests failed, say /retest to rerun all failed tests:

Test name
Commit
Details
Rerun command

lint_istio
c05ca8c36130620bf06b408dcc781cc62ee50502
link
/test lint_istio

unit-tests_istio
c05ca8c36130620bf06b408dcc781cc62ee50502
link
/test unit-tests_istio

release-notes_istio
b785f8de3389589711f47e2eb138c56eca147a42
link
/test release-notes_istio

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

Closing this PR as it was decided we'd fallback to system CA with proper implementation in 1.8


upload failure

[Information] {"event":"create","base":"/Users/mitch/src/solli.amihod.com/meeech-32676676","relative":"assets/jquery-min.js"}
{"event":"create","base":"/Users/mitch/src/solli.amihod.com/meeech-32676676","relative":"assets/jquery.ba-throttle-debounce.min.js"}
[00:14:03:023] [Ti.Network.TCPSocket] [Error] Failed to fire event: target=Network.TCPSocket reason=(JavaScript.KKJSObject) { message : "Unable to parse JSON string", line : 141d, sourceId : 1.79531e+08d, sourceURL : "app://com.meeech.shopify_theme2/js/watchers.js", name : "SyntaxError"}
Seems to repro when you drag 2 new files in

I've been getting this to the point that the app is almost unusable. I think it's related to the way that webpack is creating new files after compilation. It doesn't seem to happen if I open the compiled file and manually save it, so maybe it's a problem with replacing an existing file instead of saving it.

@parkerault sorry you having issues still. I'd suggest looking at the new tool shopify recently released to work with themes. it should be more compat with using webpack workflow

Awesome, I didn't know they had released a new tool. Thanks!

@parkerault It's actually http://themekit.cat/
the shopify_theme gem also seems dropped


chore: remove decentralised verification paths

Description
This PR removes:

remote config flag for decentralizedVerificationEnabled
stuff related to decentralised phone number lookups with ODIS
stuff relating to ODIS quota purchases
decentralised verification analytics events which are no longer used
decentralised revoke mapping
background migration from decentralised verification to CPV
translations relating to decentralised verification - unlikely we'll want to update this
fetch lost accounts on firebase

Test plan
CI
Related issues

Fixes RET-880

Backwards compatibility
Y

@kathaypacific I was surprised to see we still get successful migrations after all this time. About 97 in the last 30 days.
Maybe we should keep the migration for now, for users who has their ODIS pepper cached?


Processing data

Hi There 👋
In this milestone: Project requirements

[x] Created model classes for all entities as shown in the [ERD diagram]

[x] Set up associations between models.

[x] Made sure that the author_id column in the posts table is foreign_key for the user's table.

[x] Created custom methods

Added additional methods.

Users
A method that returns the 3 most recent posts for a given user.
Posts
A method that updates the posts counter for a user.
A method which returns the 5 most recent comments for a given post.
Comments
A method that updates the comments counter for a post.
Likes
A method that updates the likes counter for a post.

Thank you @vickymarz  😄 👍