Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Fix security issue for V4 #2424

Merged
merged 4 commits into from
Jun 19, 2024
Merged

Conversation

viveleltsi
Copy link

@viveleltsi viveleltsi commented Feb 19, 2024

Fix the severity issue for the old v4 liteDB version.
The goal is to have a patch for application who cannot update to V5.

Because this is my first PR for this project I think my changes should be properly checked and validated.

fix #2418

PS: This branch should not be merged on master but probably stay on a fix branch.

@mbdavid
Copy link
Collaborator

mbdavid commented Feb 19, 2024

Hi @viveleltsi, thanks for your code. Your v4 source, did you get from v4 branch or from v4.1.4 tag?

@viveleltsi
Copy link
Author

Hi @viveleltsi, thanks for your code. Your v4 source, did you get from v4 branch or from v4.1.4 tag?

Hello ! Thank you for your response. My branch was created on the v4.1.4 tag. (commit 918b650).
Would you like me to try rebasing it on the v4 branch ? (Sorry I didn't saw this branch :S )

@viveleltsi viveleltsi force-pushed the bugfix/fix-security-issue branch from d3182c2 to 3f7eac9 Compare February 20, 2024 08:19
@viveleltsi
Copy link
Author

I rebase my branch onto the V4 branch (commit 46a8387) and I rebuild it and run the unit testing. It's all good.

@mbdavid
Copy link
Collaborator

mbdavid commented Feb 21, 2024

Nice! Thanks.... Could you create a pull request for v4 branch? Than I will create a new tag for this new release

@viveleltsi viveleltsi changed the base branch from master to v4 February 21, 2024 06:40
@viveleltsi
Copy link
Author

Yes of course. I updated this PR to target the v4 branch.

@viveleltsi
Copy link
Author

@mbdavid I updated the PR to the v4 branch :)

@mbdavid mbdavid merged commit 3af2be2 into litedb-org:v4 Jun 19, 2024
1 check failed
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[QUESTION] Is it possible to fix the vulnerability for the v4
2 participants