You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "vishalsuvagia (via GitHub)" <gi...@apache.org> on 2023/02/01 19:03:58 UTC

[GitHub] [ambari] vishalsuvagia opened a new pull request, #3635: AMBARI-25847 : Need to update log4j:log4j dependency

vishalsuvagia opened a new pull request, #3635:
URL: https://github.com/apache/ambari/pull/3635

   ## What changes were proposed in this pull request?
   Issue:
   Need to update log4j:log4j dependency
   
   Changes:
   Excluded unwanted log4j dependencies.
   
   ## How was this patch tested?
   Validated ambari-agent and metrics started successfully


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@ambari.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ambari.apache.org
For additional commands, e-mail: dev-help@ambari.apache.org


[GitHub] [ambari] virajjasani commented on a diff in pull request #3635: AMBARI-25847 : Need to update log4j:log4j dependency

Posted by "virajjasani (via GitHub)" <gi...@apache.org>.
virajjasani commented on code in PR #3635:
URL: https://github.com/apache/ambari/pull/3635#discussion_r1094086235


##########
contrib/views/wfmanager/pom.xml:
##########
@@ -106,7 +110,15 @@
 					<groupId>tomcat</groupId>
 					<artifactId>jasper-runtime</artifactId>
 				</exclusion>
-        <!--removed for security bugs in version : 9.3.19.v20170502-->
+                               <!--removed for security bugs in version : 9.3.19.v20170502-->
+                               <exclusion>
+                                   <groupId>org.eclipse.jetty</groupId>
+                                   <artifactId>jetty-util</artifactId>
+                               </exclusion>

Review Comment:
   Is this additional one to the one below log4j exclusion?



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@ambari.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ambari.apache.org
For additional commands, e-mail: dev-help@ambari.apache.org