You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@zookeeper.apache.org by "hang chen (Jira)" <ji...@apache.org> on 2022/09/27 02:29:00 UTC

[jira] [Created] (ZOOKEEPER-4617) Upgrade apache-rat-tasks to resolve CVEs

hang chen created ZOOKEEPER-4617:
------------------------------------

             Summary: Upgrade apache-rat-tasks to resolve CVEs
                 Key: ZOOKEEPER-4617
                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4617
             Project: ZooKeeper
          Issue Type: Improvement
            Reporter: hang chen


The org.apache.rat:apache-rat-tasks@0.6 has two CVEs
 * [CVE-2015-4852|https://www.cve.org/CVERecord?id=CVE-2015-4852]
 * [CVE-2015-7501|https://www.cve.org/CVERecord?id=CVE-2015-7501]

The introduction path is: 

org.apache.zookeeper:zookeeper-contrib-zooinspector@3.9.0-SNAPSHOT › org.apache.rat:apache-rat-tasks@0.6 › org.apache.rat:apache-rat-core@0.6 › commons-collections:commons-collections@3.2

*Fix:* Upgrade to org.apache.rat:apache-rat-tasks@0.12



--
This message was sent by Atlassian Jira
(v8.20.10#820010)