Re: [CVE-2020-17516] Apache Cassandra internode encryption enforcement vulnerability

2021-02-01 Thread Aleksey Yeschenko
Correction: 3.11.x users should upgrade to 3.11.10. 3.11.24 doesn’t exist. Yet. > On 1 Feb 2021, at 18:22, Aleksey Yeschenko wrote: > > CVE-2020-17516: Apache Cassandra doesn't enforce encryption setting on > inbound internode connections > > Severity: > Important

[CVE-2020-17516] Apache Cassandra internode encryption enforcement vulnerability

2021-02-01 Thread Aleksey Yeschenko
CVE-2020-17516: Apache Cassandra doesn't enforce encryption setting on inbound internode connections Severity: Important Vendor: The Apache Software Foundation Versions Affected: Cassandra 2.1.0 to 2.1.22 Cassandra 2.2.0 to 2.2.19 Cassandra 3.0.0 to 3.0.23 Cassandra 3.11.0 to 3.11.9 Descriptio

Re: Counter values become under-counted when running repair.

2016-03-24 Thread Aleksey Yeschenko
comments about our setup? During the repair, the counter value become inaccurate, we are still playing with the repair, will keep you update with more experiments. But do you have any theory around that? Thanks a lot! Dikang. On Thu, Mar 24, 2016 at 11:02 AM, Aleksey Yeschenko

Re: Counter values become under-counted when running repair.

2016-03-24 Thread Aleksey Yeschenko
After repair is over, does the value settle? What CLs do you write to your counters with? What CLs are you reading with? --  AY On 24 March 2016 at 06:17:27, Dikang Gu (dikan...@gmail.com) wrote: Hello there, We are experimenting Counters in Cassandra 2.2.5. Our setup is that we have 6 nod

Re: [RELEASE] Apache Cassandra 3.0.0-rc1 released

2015-09-21 Thread Aleksey Yeschenko
Compatible version of python-driver (3.0.0a3) and java-driver (3.0.0-alpha3) will be published to pypi and maven later today. In the meantime, you can use the versions bundled with Cassandra 3.0.0-rc1. --  AY On September 21, 2015 at 09:04:57, Jake Luciani (j...@apache.org) wrote: The Cassandr

Re: What are the factors that affect the release time of each minor version?

2015-03-02 Thread Aleksey Yeschenko
Hi Phil, Right now there is no explicit scheme for minor releases scheduling. Eventually we just decide that it’s time for a new release - usually when the CHANGES list feels too long - and start the process. what are the duties to release a version? Need to build and eventually publish all the