[
https://issues.apache.org/jira/browse/HADOOP-14100?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15881502#comment-15881502
]
Hudson commented on HADOOP-14100:
---------------------------------
SUCCESS: Integrated in Jenkins build Hadoop-trunk-Commit #11295 (See
[https://builds.apache.org/job/Hadoop-trunk-Commit/11295/])
HADOOP-14100. Upgrade Jsch jar to latest version to fix vulnerability in (arp:
rev 159d6c56e7f3aa3ebe45750cf88735287f047b42)
* (edit) hadoop-project/pom.xml
> Upgrade Jsch jar to latest version to fix vulnerability in old versions
> -----------------------------------------------------------------------
>
> Key: HADOOP-14100
> URL: https://issues.apache.org/jira/browse/HADOOP-14100
> Project: Hadoop Common
> Issue Type: Bug
> Affects Versions: 2.7.3, 2.6.5
> Reporter: Vinayakumar B
> Assignee: Vinayakumar B
> Priority: Critical
> Fix For: 2.9.0, 3.0.0-alpha3
>
> Attachments: HADOOP-14100-01.patch
>
>
> Recently there was on vulnerability reported on jsch library. Its fixed in
> latest 0.1.54 version before CVE was made public.
> https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5725
> So, need to upgrade jsch to latest 0.1.54 version.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
