You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@zookeeper.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2022/09/27 02:31:00 UTC

[jira] [Updated] (ZOOKEEPER-4617) Upgrade apache-rat-tasks to resolve CVEs

     [ https://issues.apache.org/jira/browse/ZOOKEEPER-4617?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

ASF GitHub Bot updated ZOOKEEPER-4617:
--------------------------------------
    Labels: pull-request-available  (was: )

> Upgrade apache-rat-tasks to resolve CVEs
> ----------------------------------------
>
>                 Key: ZOOKEEPER-4617
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4617
>             Project: ZooKeeper
>          Issue Type: Improvement
>            Reporter: hang chen
>            Priority: Major
>              Labels: pull-request-available
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> The org.apache.rat:apache-rat-tasks@0.6 has two CVEs
>  * [CVE-2015-4852|https://www.cve.org/CVERecord?id=CVE-2015-4852]
>  * [CVE-2015-7501|https://www.cve.org/CVERecord?id=CVE-2015-7501]
> The introduction path is: 
> org.apache.zookeeper:zookeeper-contrib-zooinspector@3.9.0-SNAPSHOT › org.apache.rat:apache-rat-tasks@0.6 › org.apache.rat:apache-rat-core@0.6 › commons-collections:commons-collections@3.2
> *Fix:* Upgrade to org.apache.rat:apache-rat-tasks@0.12



--
This message was sent by Atlassian Jira
(v8.20.10#820010)