backend

backend copied to clipboard

Bumps [joblib](https://github.com/joblib/joblib) from 1.0.0 to 1.2.0. Changelog Sourced from joblib's changelog. Release 1.2.0 Fix a security issue where eval(pre_dispatch) could potentially run arbitrary code. Now only basic numerics are supported....

dependabot[bot]

Bumps [protobuf](https://github.com/protocolbuffers/protobuf) from 3.14.0 to 3.18.3. Release notes Sourced from protobuf's releases. Protocol Buffers v3.18.3 C++ Reduce memory consumption of MessageSet parsing This release addresses a Security Advisory for C++...

dependabot[bot]

## Details While triaging your project, our bug fixing tool generated the following message(s)- > In file: [mail.py](https://github.com/mediacloud/backend/blob/master/apps/common/src/python/mediawords/util/mail.py#L138), method: send_email, a clear-text protocol such as FTP, Telnet or SMTP is...

fazledyn-or

Fix bug from Feeds Error processing feed for download 3869998282: Error processing feed for http://feeds.foxnews.com/foxnews/politics: object has no attribute 'enclosures' Error processing feed for download 3871398204: Error processing feed for...

thepsalmist

Fix `java.lang.ClassCastException` bug by querying mediacloud32 and mediacloud64 solr collections separately, then combine responses.

thepsalmist

Bumps [cryptography](https://github.com/pyca/cryptography) from 3.3.2 to 39.0.1. Changelog Sourced from cryptography's changelog. 39.0.1 - 2023-02-07 * **SECURITY ISSUE** - Fixed a bug where ``Cipher.update_into`` accepted Python buffer protocol objects, but allowed...

dependabot[bot]

Add monitoring to the rabbitmq service by: 1. Leveraging on rabbitmq's (version > 3.8) inbuilt `rabbitmq_prometheus` plugin 2. Expose port `15692` on the rabbitmq service to access the scrapped `rabbitmq`...

thepsalmist