You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@parquet.apache.org by "jincongho (Jira)" <ji...@apache.org> on 2023/08/17 21:42:00 UTC

[jira] [Created] (PARQUET-2338) CVE-2022-25168 in hadoop-common

jincongho created PARQUET-2338:
----------------------------------

             Summary: CVE-2022-25168 in hadoop-common
                 Key: PARQUET-2338
                 URL: https://issues.apache.org/jira/browse/PARQUET-2338
             Project: Parquet
          Issue Type: Bug
          Components: parquet-hadoop
    Affects Versions: 1.13.1
            Reporter: jincongho


[CVE-2022-25168|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25168] requires updating hadoop-common to 3.2.4 or 3.3.3.

Although `FileUtils.untar` isnt used inparquet-hadoop, will appreciate if we can release a new parquet-hadoop soon with these newer version. Otherwise parquet-hadoop will be flagged as security concern too.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)