You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@arrow.apache.org by "Matt Darwin (JIRA)" <ji...@apache.org> on 2017/07/20 14:32:00 UTC

[jira] [Commented] (ARROW-1243) security: upgrade all libraries to latest stable versions

    [ https://issues.apache.org/jira/browse/ARROW-1243?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16094765#comment-16094765 ] 

Matt Darwin commented on ARROW-1243:
------------------------------------

Fixed in [PR 873|https://github.com/apache/arrow/pull/873] - please consider merging.

> security: upgrade all libraries to latest stable versions
> ---------------------------------------------------------
>
>                 Key: ARROW-1243
>                 URL: https://issues.apache.org/jira/browse/ARROW-1243
>             Project: Apache Arrow
>          Issue Type: Improvement
>          Components: Java - Memory, Java - Vectors
>    Affects Versions: 0.4.1
>            Reporter: Matt Darwin
>             Fix For: 0.5.0
>
>
> Some of the java libraries used are very old - e.g. commons-cli dates from 2009.
> Rather than (or as well as) reacting to security vulnerabilities when they are discovered, we should pro-actively update all our libraries to the latest versions.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)