You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ranger.apache.org by "Basapuram Kumar (Jira)" <ji...@apache.org> on 2025/01/03 15:13:00 UTC

[jira] [Created] (RANGER-5091) Bump dnsjava to 3.6.2 due to cve-2024-25638

Basapuram Kumar created RANGER-5091:
---------------------------------------

             Summary: Bump dnsjava to 3.6.2 due to cve-2024-25638
                 Key: RANGER-5091
                 URL: https://issues.apache.org/jira/browse/RANGER-5091
             Project: Ranger
          Issue Type: Improvement
          Components: plugins, Ranger
    Affects Versions: 2.5.0
            Reporter: Basapuram Kumar


Bump *dnsjava* to *3.6.2* due to cve-2024-25638

cve-2024-25638 reference 

[https://nvd.nist.gov/vuln/detail/cve-2024-25638]

As per the above CVE, its fixed in >=3.6.0 onwards. Hence suggesting it to  latest version 3.6.2.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)