You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@pulsar.apache.org by "Sijie Guo (JIRA)" <ji...@apache.org> on 2019/07/08 15:18:00 UTC
[jira] [Commented] (PULSAR-3) Upgrade
hadoop-mapreduce-client-core-2.7.4.jar to 2.7.5
[ https://issues.apache.org/jira/browse/PULSAR-3?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16880458#comment-16880458 ]
Sijie Guo commented on PULSAR-3:
--------------------------------
[~ABakerIII] Pulsar team is using Github issues for managing the issues. Can you please file the issue on Github - [https://github.com/apache/pulsar] ? Thanks.
> Upgrade hadoop-mapreduce-client-core-2.7.4.jar to 2.7.5
> --------------------------------------------------------
>
> Key: PULSAR-3
> URL: https://issues.apache.org/jira/browse/PULSAR-3
> Project: Pulsar
> Issue Type: Improvement
> Reporter: Albert Baker
> Priority: Major
> Labels: build, easyfix, security
> Original Estimate: 5m
> Remaining Estimate: 5m
>
> OWASP Dependency check reports a /critical/ (severity 10) bug w/2.7.4
> [https://nvd.nist.gov/vuln/detail/CVE-2016-1906]
> Mitigation is to upgrade to 2.7.5
> Please update the pom.xml version #
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)