You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Wei-Chiu Chuang (Jira)" <ji...@apache.org> on 2020/10/28 16:30:00 UTC
[jira] [Updated] (HADOOP-17236) Bump up snakeyaml to 1.26 to
mitigate CVE-2017-18640
[ https://issues.apache.org/jira/browse/HADOOP-17236?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Wei-Chiu Chuang updated HADOOP-17236:
-------------------------------------
Fix Version/s: 3.4.0
3.3.1
Resolution: Fixed
Status: Resolved (was: Patch Available)
Patch applies cleanly to branch-3.3, too. Thanks [~brahmareddy]
> Bump up snakeyaml to 1.26 to mitigate CVE-2017-18640
> ----------------------------------------------------
>
> Key: HADOOP-17236
> URL: https://issues.apache.org/jira/browse/HADOOP-17236
> Project: Hadoop Common
> Issue Type: Bug
> Reporter: Brahma Reddy Battula
> Assignee: Brahma Reddy Battula
> Priority: Major
> Fix For: 3.3.1, 3.4.0
>
> Attachments: HADOOP-17236-001-tempToRun.patch, HADOOP-17236-001.patch
>
>
> Bump up snakeyaml to 1.26 to mitigate CVE-2017-18640
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org