This is an automated email from the ASF dual-hosted git repository.
stevel pushed a commit to branch branch-3.3.5
in repository https://gitbox.apache.org/repos/asf/hadoop.git
The following commit(s) were added to refs/heads/branch-3.3.5 by this push:
new 2b7480d4ed4 HADOOP-18561. Update commons-net to 3.9.0 (#5214)
2b7480d4ed4 is described below
commit 2b7480d4ed4d4b0245724c706a3fe52fe13d74be
Author: Steve Loughran <ste...@cloudera.com>
AuthorDate: Mon Dec 19 11:24:24 2022 +0000
HADOOP-18561. Update commons-net to 3.9.0 (#5214)
Addresses CVE-2021-37533, which *only* relates to FTP.
Applications not using the ftp:// filesystem, which, as
anyone who has used it will know is very minimal and
so rarely used, is not a critical part of the project.
Furthermore, the FTP-related issue is at worst information leakage
if someone connects to a malicious server.
This is a due diligence PR rather than an emergency fix.
Contributed by Steve Loughran
---
LICENSE-binary | 2 +-
hadoop-project/pom.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/LICENSE-binary b/LICENSE-binary
index e8d8f4440b0..9b0284674d8 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -254,7 +254,7 @@ commons-collections:commons-collections:3.2.2
commons-daemon:commons-daemon:1.0.13
commons-io:commons-io:2.8.0
commons-logging:commons-logging:1.1.3
-commons-net:commons-net:3.6
+commons-net:commons-net:3.9.0
de.ruedigermoeller:fst:2.50
io.dropwizard.metrics:metrics-core:3.2.4
io.grpc:grpc-api:1.26.0
diff --git a/hadoop-project/pom.xml b/hadoop-project/pom.xml
index 7f453784adc..c5d7194889e 100644
--- a/hadoop-project/pom.xml
+++ b/hadoop-project/pom.xml
@@ -126,7 +126,7 @@
<commons-logging.version>1.1.3</commons-logging.version>
<commons-logging-api.version>1.1</commons-logging-api.version>
<commons-math3.version>3.1.1</commons-math3.version>
- <commons-net.version>3.6</commons-net.version>
+ <commons-net.version>3.9.0</commons-net.version>
<commons-text.version>1.10.0</commons-text.version>
<kerby.version>1.0.1</kerby.version>
---------------------------------------------------------------------
To unsubscribe, e-mail: common-commits-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-commits-h...@hadoop.apache.org
