You are viewing a plain text version of this content. The canonical link for it is here.

Posted to yarn-dev@hadoop.apache.org by Steve Loughran <st...@cloudera.com.INVALID> on 2022/10/06 09:54:51 UTC

FYI, jettison update due to CVE

there's a PR up to update jettison, which is only used by yarn rm and nm
https://issues.apache.org/jira/browse/HADOOP-18468

reviews welcome, as if things break it'll be yarn that stops working.

of course, if someone actually wants to help coalesce the #of json
libraries used across the project down to one or two, life would be even
better...