You are viewing a plain text version of this content. The canonical link for it is here.

Posted to yarn-issues@hadoop.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2023/11/13 20:31:00 UTC

[jira] [Commented] (YARN-11498) Exclude Jettison from jersey-json artifact in hadoop-yarn-common's pom.xml

    [ https://issues.apache.org/jira/browse/YARN-11498?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17785667#comment-17785667 ] 

ASF GitHub Bot commented on YARN-11498:
---------------------------------------

steveloughran commented on PR #6063:
URL: https://github.com/apache/hadoop/pull/6063#issuecomment-1809041271

   this has been in <pending> for a while. why not rebase and retry?




> Exclude Jettison from jersey-json artifact in hadoop-yarn-common's pom.xml
> --------------------------------------------------------------------------
>
>                 Key: YARN-11498
>                 URL: https://issues.apache.org/jira/browse/YARN-11498
>             Project: Hadoop YARN
>          Issue Type: Task
>          Components: build
>            Reporter: Devaspati Krishnatri
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 3.4.0
>
>
> This exclusion is done to reduce CVEs present due to an older version of Jettison(1.1) being pulled in with jersey-json artifact.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: yarn-issues-help@hadoop.apache.org