You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@spark.apache.org by "Hyukjin Kwon (Jira)" <ji...@apache.org> on 2021/04/18 03:16:00 UTC

[jira] [Commented] (SPARK-35054) Getting Critical Vulnerability CVE-2021-20231 on spark 3.0.0 branch

    [ https://issues.apache.org/jira/browse/SPARK-35054?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17324395#comment-17324395 ] 

Hyukjin Kwon commented on SPARK-35054:
--------------------------------------

How are they related to Spark?

> Getting Critical Vulnerability CVE-2021-20231 on spark 3.0.0 branch
> -------------------------------------------------------------------
>
>                 Key: SPARK-35054
>                 URL: https://issues.apache.org/jira/browse/SPARK-35054
>             Project: Spark
>          Issue Type: Bug
>          Components: Spark Core
>    Affects Versions: 3.0.0
>            Reporter: Shashank Jain
>            Priority: Major
>
> Currently while running Trivy Scan on Spark build we are getting the following critical vulnerability 
> CVE-2021-20231   
> CVE-2021-20232
> How to fix these vulnerabilities in spark 3.0.0 branch ?



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org