[
https://issues.apache.org/jira/browse/HADOOP-16918?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17192376#comment-17192376
]
Wei-Chiu Chuang commented on HADOOP-16918:
------------------------------------------
We can probably update zookeeper from 3.4.9 to 3.4.14 to address all known
vulnerabilities. Not sure if it's compatible. [~symat] any ideas?
The hbase-common change requires a small update from 1.2.6 to 1.2.6.1. Seems
like an easy one.
> Dependency update for Hadoop 2.10
> ---------------------------------
>
> Key: HADOOP-16918
> URL: https://issues.apache.org/jira/browse/HADOOP-16918
> Project: Hadoop Common
> Issue Type: Improvement
> Reporter: Wei-Chiu Chuang
> Priority: Major
> Labels: release-blocker
> Attachments: dependency-check-report.html
>
>
> A number of dependencies can be updated.
> nimbus-jose-jwt
> jetty
> netty
> zookeeper
> hbase-common
> jackson-databind
> and many more. They should be updated in the 2.10.1 release.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org
