Re: Apache Cassandra Sidecar - Vulnerability Advisory Location

2025-05-20 Thread Fleming, Jackson via user
look, and I don’t have one to disclose right now). Would it just be via the mailing list? Again, if that’s TBD I think that’s answer enough for right now. Regards, Jackson From: C. Scott Andreas Date: Wednesday, 21 May 2025 at 9:28 am To: Fleming, Jackson via user Cc: user

Apache Cassandra Sidecar - Vulnerability Advisory Location

2025-05-20 Thread Fleming, Jackson via user
Hi everyone, We’re looking at the Apache Cassandra Sidecar project (https://github.com/apache/cassandra-sidecar), our security team has asked us in the event of a vulnerability being found, would that be disclosed via the github security advisory system, or would it be disclosed via another mec

Re: Cassandra 5 - Driver 3.11 support plans

2023-11-19 Thread Fleming, Jackson via user
, Jackson via user Date: Monday, 20 November 2023 at 11:36 am To: user@cassandra.apache.org Cc: Fleming, Jackson Subject: Re: Cassandra 5 - Driver 3.11 support plans EXTERNAL EMAIL - USE CAUTION when clicking links or attachments Apologies for the double up email but here’s the stack trace I

Re: Cassandra 5 - Driver 3.11 support plans

2023-11-19 Thread Fleming, Jackson via user
Again know the best answer is probably to use 4.16 or newer in the driver. But I’d expect some people to raise tickets for this after release Thanks, Jackson From: Fleming, Jackson via user Date: Monday, 20 November 2023 at 10:02 am To: user@cassandra.apache.org Cc: Fleming, Jackson Subject:

Cassandra 5 - Driver 3.11 support plans

2023-11-19 Thread Fleming, Jackson via user
Hi All, Asking a bit of a silly question on this list I expect I already know the answer to, but are there any plans to support the new vector datatype in the 3.11 version of the java driver (https://github.com/apache/cassandra-java-driver)? I assume the answer will be no, but it might be a g

Re: Cassandra-all missing for 4.0.10 and 4.1.2

2023-05-29 Thread Fleming, Jackson
Apologies for noise, seems like it’s resolving now on my end, must have been a transient issue. Regards, Jackson Fleming From: Fleming, Jackson Date: Tuesday, 30 May 2023 at 2:51 pm To: user@cassandra.apache.org Subject: Cassandra-all missing for 4.0.10 and 4.1.2 NetApp Security WARNING

Cassandra-all missing for 4.0.10 and 4.1.2

2023-05-29 Thread Fleming, Jackson
Hi, Thanks for the recent releases for Cassandra 4.0.10 and 4.1.2, I noticed in maven there appears to be no 4.0.10 or 4.1.2 version of the Cassandra-all jar yet. Any plans to release it soon? Seems like this is usually done at the same time as the release of the installation artefacts. Regar

Re: Controlling cipher suites for TLS 1.3 on Cassandra 4

2022-12-21 Thread Fleming, Jackson
Sent: Wednesday, December 21, 2022 7:26:23 PM To: Fleming, Jackson ; user@cassandra.apache.org Subject: RE: Controlling cipher suites for TLS 1.3 on Cassandra 4 NetApp Security WARNING: This is an external email. Do not click links or open attachments unless you recognize the sender and know

Re: Controlling cipher suites for TLS 1.3 on Cassandra 4

2022-12-20 Thread Fleming, Jackson
thms=SSLv3, RC4, DH keySize, MD5withRSA < 2048, TLSv1, TLSv1.1 jdk.tls.disabledAlgorithms=SSLv3, DSA, RSA keySize < 2048, TLSv1, TLSv1.1 (changed to this) I hope this can help you to resolve your issue. Kind regards, Amit Patel From: Fleming, Jackson Sent: 20 December 2022 04:17 To: user@cas

Controlling cipher suites for TLS 1.3 on Cassandra 4

2022-12-19 Thread Fleming, Jackson
Hi All, I’ve hit some trouble recently around restricting ciphers for clients on a test Cassandra 4.0.4 cluster, we’d like to be able to control the Ciphers offered via Cassandra for both TLS 1.2 and 1.3. Was wondering if anyone has had any luck with getting my particular use case to work. I’v