You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@oozie.apache.org by William Crowell <WC...@perforce.com.INVALID> on 2023/07/17 18:26:39 UTC

CVE-2020-35451

Hi,

Can someone tell me what Jira issue and pull request that CVE-2020-35451 was fixed under?

Regards,

William Crowell


This e-mail may contain information that is privileged or confidential. If you are not the intended recipient, please delete the e-mail and any attachments and notify us immediately.


Re: CVE-2020-35451

Posted by William Crowell <WC...@perforce.com.INVALID>.
Jason,

Thank you.  Looks like a very minor change.

Regards,

William Crowell


This e-mail may contain information that is privileged or confidential. If you are not the intended recipient, please delete the e-mail and any attachments and notify us immediately.


Re: CVE-2020-35451

Posted by Jason Phelps <jp...@cloudera.com.INVALID>.
Hello William

The vulnerability was purposely obscured publicly (if I remember
correctly), so I do not believe there was an Apache JIRA created for
it. The pull request that resolved it is here:

https://github.com/apache/oozie/commit/f1e01a9e155692aa5632f4573ab1b3ebeab7ef45

On Mon, Jul 17, 2023 at 2:28 PM William Crowell
<WC...@perforce.com.invalid> wrote:
>
> Hi,
>
> Can someone tell me what Jira issue and pull request that CVE-2020-35451 was fixed under?
>
> Regards,
>
> William Crowell
>
>
> This e-mail may contain information that is privileged or confidential. If you are not the intended recipient, please delete the e-mail and any attachments and notify us immediately.
>