This is an automated email from the ASF dual-hosted git repository.
slfan1989 pushed a commit to branch branch-3.4
in repository https://gitbox.apache.org/repos/asf/hadoop.git
The following commit(s) were added to refs/heads/branch-3.4 by this push:
new 193c72c1e410 HADOOP-19115. Upgrade to nimbus-jose-jwt 9.37.2 due to
CVE-2023-52428. (#6637) (#6682) Contributed by PJ Fanning.
193c72c1e410 is described below
commit 193c72c1e4102e7a3f09b5003ef0373f11266a83
Author: PJ Fanning <pjfann...@users.noreply.github.com>
AuthorDate: Fri Mar 29 02:43:32 2024 +0100
HADOOP-19115. Upgrade to nimbus-jose-jwt 9.37.2 due to CVE-2023-52428.
(#6637) (#6682) Contributed by PJ Fanning.
Reviewed-by: Dinesh Chitlangia <dine...@apache.org>
Signed-off-by: Shilun Fan <slfan1...@apache.org>
---
LICENSE-binary | 2 +-
hadoop-project/pom.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/LICENSE-binary b/LICENSE-binary
index fcbff70a19fe..3c02de55effc 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -241,7 +241,7 @@ com.google.guava:guava:20.0
com.google.guava:guava:27.0-jre
com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava
com.microsoft.azure:azure-storage:7.0.0
-com.nimbusds:nimbus-jose-jwt:9.31
+com.nimbusds:nimbus-jose-jwt:9.37.2
com.zaxxer:HikariCP:4.0.3
commons-beanutils:commons-beanutils:1.9.4
commons-cli:commons-cli:1.5.0
diff --git a/hadoop-project/pom.xml b/hadoop-project/pom.xml
index 7f91be82e38b..77b71a884225 100644
--- a/hadoop-project/pom.xml
+++ b/hadoop-project/pom.xml
@@ -216,7 +216,7 @@
<openssl-wildfly.version>1.1.3.Final</openssl-wildfly.version>
<jsonschema2pojo.version>1.0.2</jsonschema2pojo.version>
<woodstox.version>5.4.0</woodstox.version>
- <nimbus-jose-jwt.version>9.31</nimbus-jose-jwt.version>
+ <nimbus-jose-jwt.version>9.37.2</nimbus-jose-jwt.version>
<nodejs.version>v12.22.1</nodejs.version>
<yarnpkg.version>v1.22.5</yarnpkg.version>
<apache-ant.version>1.10.13</apache-ant.version>
---------------------------------------------------------------------
To unsubscribe, e-mail: common-commits-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-commits-h...@hadoop.apache.org
