This is an automated email from the ASF dual-hosted git repository.
arshad pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ambari-metrics.git
The following commit(s) were added to refs/heads/master by this push:
new 79b30d7 [AMBARI-26184] Resolve snakeyaml 0.12 CVE (#136)
79b30d7 is described below
commit 79b30d74b12ec260e49628a206d5711ddbedef62
Author: Sandeep Kumar <[email protected]>
AuthorDate: Tue Dec 10 16:01:22 2024 +0530
[AMBARI-26184] Resolve snakeyaml 0.12 CVE (#136)
---
ambari-metrics-timelineservice/pom.xml | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/ambari-metrics-timelineservice/pom.xml
b/ambari-metrics-timelineservice/pom.xml
index 058f914..d75c570 100644
--- a/ambari-metrics-timelineservice/pom.xml
+++ b/ambari-metrics-timelineservice/pom.xml
@@ -282,6 +282,10 @@
<groupId>log4j</groupId>
<artifactId>log4j</artifactId>
</exclusion>
+ <exclusion>
+ <groupId>org.yaml</groupId>
+ <artifactId>snakeyaml</artifactId>
+ </exclusion>
</exclusions>
</dependency>
<!-- zkclient is helix-core dependency but it need to be 0.9 in order for
AMS HA to work on secure cluster-->
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]