You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-issues@hadoop.apache.org by "PJ Fanning (Jira)" <ji...@apache.org> on 2023/03/09 11:10:00 UTC

[jira] [Created] (HADOOP-18658) snakeyaml dependency: upgrade to v2.0

PJ Fanning created HADOOP-18658:
-----------------------------------

             Summary: snakeyaml dependency: upgrade to v2.0
                 Key: HADOOP-18658
                 URL: https://issues.apache.org/jira/browse/HADOOP-18658
             Project: Hadoop Common
          Issue Type: Task
            Reporter: PJ Fanning


* [https://github.com/advisories/GHSA-mjmj-j48q-9wg2]
 * I don't think this needs to go in v3.3.5 - since this CVE affects part of snakeyaml that hadoop doesn't use



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org