Re: [milo-dev] Eclipse-Milo security report with JFROG

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]

Re: [milo-dev] Eclipse-Milo security report with JFROG

From: "RB, Pramod Kumar" <pramodkumar.rb@xxxxxxxxxxxxxxxx>
Date: Tue, 10 May 2022 07:57:30 +0000
Accept-language: en-IN, en-US
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=thermofisher.com; dmarc=pass action=none header.from=thermofisher.com; dkim=pass header.d=thermofisher.com; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=5i3vfQPBGGdXy8VpZvoeaBVP1w3AwoV8oHDePKnD9EQ=; b=RnKmFJdlwqVahW+zpnTsoWGXh87anVCM68KwSoauH1vedZ0x3JCObPkRNST51jIpWKdykod38mfG3EONOsTj1zAeYtcX4RLMgtsbKvHjXI8/L9jExJ+KwRks7jGqE3FUZtuwATAfMuhSPp8dtKB/dYEuEMCBEpH0alUGp2JtFzKlAvIFoWn8e9ZJkN7NpG0xrSkHb8lGL349H5zVswZx+TBjWRfH/rr7Z02oE6HfiJXxcwIJhobD9ezxws+MIkZV70Q2vqHp7sjJgTVbJKqEEeKaU3hF1Nchb0Me2k3outvNR4CIqmne5IwR5SlMqcmlAOjgVXGsKQYcwPwj9yZ0Aw==
Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Wx+Lb5SObfQQTLgnF6j4F573sWvZ2NRBGP7Wz8GVkZZrEynMijOWWVGDxFKMY3mCrvn8wrolnUift4to3AwlnbY+QvO0SeyoDIjoIJSc9Cb8vYbYApxIYD3HbAnUz520pQpYD4RuFlx9J9U6RLFzDsNau0Hy24N7nutZnsRgj2ml8PpwJ0iyXsJLTmXNtp4+v0Ey9sCieSi2w5h/zmUH1BFSoT4pY7MTsUNtIYia2kjbmbQTnv+Uo2mqUWbACBeJAfnfWzamqMfWNPtZ/kJvsz4gjlOXWOgcwVTdOw/SqI8+Pn6LbKXyhxx32SY0WAFwwdeiUPosj1I15J3aY49m1A==
Delivered-to: milo-dev@xxxxxxxxxxx
List-archive: <https://www.eclipse.org/mailman/private/milo-dev/>
List-help: <mailto:milo-dev-request@eclipse.org?subject=help>
List-subscribe: <https://www.eclipse.org/mailman/listinfo/milo-dev>, <mailto:milo-dev-request@eclipse.org?subject=subscribe>
List-unsubscribe: <https://www.eclipse.org/mailman/options/milo-dev>, <mailto:milo-dev-request@eclipse.org?subject=unsubscribe>
Thread-index: AQHYYHEc743aOApB+k29OwpOqNo2G60QJU3dgAeeOaw=
Thread-topic: Eclipse-Milo security report with JFROG

Hello milo dev team, Kevin Herron,

We got few critical, high and medium security issue after performing security scan on the milo sdk, can we get support/upgrades to fix the versions as mentioned in attached security scan report.

Regards,

Pramod

From: Chakraborty, Debapriyo <debapriyo.chakraborty@xxxxxxxxxxxxxxxx>
Date: Thursday, 5 May 2022 at 4:59 PM
To: milo-dev@xxxxxxxxxxx <milo-dev@xxxxxxxxxxx>
Cc: PAUL, SOURAV <sourav.paul2@xxxxxxxxxxxxxxxx>, Ganeshan, Ashwini <ashwini.ganeshan@xxxxxxxxxxxxxxxx>, RB, Pramod Kumar <pramodkumar.rb@xxxxxxxxxxxxxxxx>, S, Shyamsundar <shyamsundar.s@xxxxxxxxxxxxxxxx>
Subject: FW: Eclipse-Milo security report with JFROG

Hi,

Forwarding the mail after creating the account in eclipse.org

We are using 0.6.3 version of Eclipse-milo in our project.

During the report generation with JFROG we found some critical, high and medium Security issue.

PFA for more information of the components and the version we are using.

Kindly suggest the solution / upgrades that we can perform from our end if possible.

If there is anything that needs to be done from your end please do the needful and keep us informed.

Thanks and Regards

Debapriyo Chakraborty

Email id: debapriyo.chakraborty@xxxxxxxxxxxxxxxx

Thermo Fisher Scientific

From: Chakraborty, Debapriyo <debapriyo.chakraborty@xxxxxxxxxxxxxxxx>
Date: Thursday, 5 May 2022 at 4:54 PM
To: milo-dev@xxxxxxxxxxx <milo-dev@xxxxxxxxxxx>
Cc: PAUL, SOURAV <sourav.paul2@xxxxxxxxxxxxxxxx>, RB, Pramod Kumar <pramodkumar.rb@xxxxxxxxxxxxxxxx>, S, Shyamsundar <shyamsundar.s@xxxxxxxxxxxxxxxx>, Ganeshan, Ashwini <ashwini.ganeshan@xxxxxxxxxxxxxxxx>
Subject: Eclipse-Milo security report with JFROG

Hi,