Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update npp.sls #2068

Merged
merged 3 commits into from
Jan 22, 2024
Merged

Update npp.sls #2068

merged 3 commits into from
Jan 22, 2024

Conversation

lamdaiphong
Copy link
Contributor

version 8.5.4 has been reported security vulnerabilities, update latest version.

version 8.5.4 has been reported security vulnerabilities, update latest version.
npp.sls Outdated Show resolved Hide resolved
Conflicted version 32bit vs 64bit caused test failed. Removed x64bit version.
@lamdaiphong lamdaiphong requested a review from twangboy January 18, 2024 23:00
npp.sls Outdated Show resolved Hide resolved
Removes version 8.5.5 caused test failed
Copy link
Contributor Author

@lamdaiphong lamdaiphong left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Removed version 8.5.5

@twangboy twangboy merged commit 27f9737 into saltstack:master Jan 22, 2024
8 checks passed
@twangboy
Copy link
Collaborator

Thanks for getting those changes in!

@TheBigBear
Copy link
Contributor

@twangboy is this correct to entirely remove that version? I would have thought of creating a 'with CVE' category and removing its ability to be installed but leaving in the section to be uninstalled. Much like you guys do for the windows salt-minion would be better? No?

@twangboy
Copy link
Collaborator

twangboy commented Jan 22, 2024

That's basically what that list at the bottom is for. Since you're adding a new version, it is not required that you add the CVE version of npp to the bottom list. If this was a version that used to be managed using a salt package definition, then you would need to move it to the bottom list. That bottom list is basically remove only as it does not define an installation parameter. Since you were adding a new version, it was up to you.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants