You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues-all@impala.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2024/05/03 06:31:00 UTC

[jira] [Commented] (IMPALA-13044) Upgrade bouncycastle to 1.78

    [ https://issues.apache.org/jira/browse/IMPALA-13044?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17843131#comment-17843131 ] 

ASF subversion and git services commented on IMPALA-13044:
----------------------------------------------------------

Commit 7ad94006563b88d9221b4ac978dbf5b4fc0a3ca1 in impala's branch refs/heads/master from Peter Rozsa
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=7ad940065 ]

IMPALA-13044: Upgrade bouncycastle to 1.78

This patch upgrades bouncycastle to 1.78. As of bouncycastle:1.71, the
*-jdk15on artifact is no longer available, the artifact is changed to
*-jdk18on.

Tests:
 - core tests ran

Change-Id: I8372916ab79b863e7a07d22e8333abd54492fa29
Reviewed-on: http://gerrit.cloudera.org:8080/21371
Reviewed-by: Impala Public Jenkins <im...@cloudera.com>
Tested-by: Impala Public Jenkins <im...@cloudera.com>


> Upgrade bouncycastle to 1.78
> ----------------------------
>
>                 Key: IMPALA-13044
>                 URL: https://issues.apache.org/jira/browse/IMPALA-13044
>             Project: IMPALA
>          Issue Type: Task
>          Components: Frontend
>    Affects Versions: Impala 4.3.0
>            Reporter: Peter Rozsa
>            Assignee: Peter Rozsa
>            Priority: Major
>
> Impala uses boucycastle:1.68 which contains various CVEs. Upgrading to 1.78 resolves these security concerns.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org