amahussein opened a new pull request #3363:
URL: https://github.com/apache/hadoop/pull/3363


   [HADOOP-17223](https://issues.apache.org/jira/browse/HADOOP-17223) update 
org.apache.httpcomponents:httpclient to 4.5.13 and httpcore to 4.4.13
   
   There is CVE-2020-13956
   moderate severity
   
   Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can 
misinterpret malformed authority component in reques...
   pom.xml update suggested:
   org.apache.httpcomponents:httpclient ~> 4.5.13 
   
   this PR is to backport the changes into branch-2.10 bumping 
httpcomponents:httpclient to 4.5.13
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to