You are viewing a plain text version of this content. The canonical link for it is here.
Posted to hdfs-dev@hadoop.apache.org by "Renukaprasad C (Jira)" <ji...@apache.org> on 2022/04/24 15:47:00 UTC
[jira] [Resolved] (HDFS-15741) Vulnerability fixes needed for Jackson Hadoop dependency library
[ https://issues.apache.org/jira/browse/HDFS-15741?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Renukaprasad C resolved HDFS-15741.
-----------------------------------
Resolution: Duplicate
Upgraded as part of HADOOP-17534, this is no more valid.
[~weichiu] [~SouryakantaDwivedy]
> Vulnerability fixes needed for Jackson Hadoop dependency library
> -----------------------------------------------------------------
>
> Key: HDFS-15741
> URL: https://issues.apache.org/jira/browse/HDFS-15741
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: security
> Affects Versions: 3.1.1
> Reporter: Souryakanta Dwivedy
> Priority: Minor
> Attachments: CVEs_found.png
>
>
> Vulnerability fixes need for Jackson Hadoop dependency library
> Below are the Jackson library jars used for hadoop where CVEs are found
> Jackson [version 2.10.3 ]
> - jackson-core-2.10.3.jar
> CVE details :- [ CVE-2020-25649 ]
> ======================
> Jackson-core [version 2.4.0 ]
> - htrace-core-3.1.0-incubating.jar
> CVE details :- [ CVE-2020-24616 ]
> ================ =====
>
>
>
>
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-dev-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-dev-help@hadoop.apache.org