You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-issues@hadoop.apache.org by "Steve Loughran (Jira)" <ji...@apache.org> on 2026/02/12 15:36:00 UTC

[jira] [Updated] (HADOOP-19813) CVE-2025-67735 Bump AWS SDK bundle for netty CVE

     [ https://issues.apache.org/jira/browse/HADOOP-19813?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Steve Loughran updated HADOOP-19813:
------------------------------------
    Summary: CVE-2025-67735 Bump AWS SDK bundle for netty CVE  (was: CVE-2025-67735 Bump AWS SDK bundle)

> CVE-2025-67735 Bump AWS SDK bundle for netty CVE
> ------------------------------------------------
>
>                 Key: HADOOP-19813
>                 URL: https://issues.apache.org/jira/browse/HADOOP-19813
>             Project: Hadoop Common
>          Issue Type: Task
>          Components: build, fs/s3
>    Affects Versions: 3.5.0, 3.4.3
>            Reporter: Isaac
>            Priority: Minor
>
> Hi all,
> The AWS SDK being used has a netty version affected by CVE-2025-67735
> It should be updated to, at least v2.40.11, which uses a fixed version of netty



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org