[ 
https://issues.apache.org/jira/browse/HADOOP-18301?focusedWorklogId=782980&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-782980
 ]

ASF GitHub Bot logged work on HADOOP-18301:
-------------------------------------------

                Author: ASF GitHub Bot
            Created on: 20/Jun/22 13:31
            Start Date: 20/Jun/22 13:31
    Worklog Time Spent: 10m 
      Work Description: ashutoshcipher commented on PR #4455:
URL: https://github.com/apache/hadoop/pull/4455#issuecomment-1160453902

   Thanks @ayushtkn for checking. There isn't any specific CVE related to this 
as far as I know. As the dependency is old and new version has general new 
features and bug fixes. Updating it seems to be a good idea to me.
   
   Also the the same is updated in Hive as well - 
https://github.com/apache/hive/pull/3370




Issue Time Tracking
-------------------

    Worklog Id:     (was: 782980)
    Time Spent: 50m  (was: 40m)

> Upgrade commons-io to 2.11.0
> ----------------------------
>
>                 Key: HADOOP-18301
>                 URL: https://issues.apache.org/jira/browse/HADOOP-18301
>             Project: Hadoop Common
>          Issue Type: Improvement
>            Reporter: Ashutosh Gupta
>            Assignee: Ashutosh Gupta
>            Priority: Minor
>              Labels: pull-request-available
>             Fix For: 3.4.0, 3.3.2, 3.2.4
>
>          Time Spent: 50m
>  Remaining Estimate: 0h
>
> Current version 2.8.0 is almost ~2 years old
> Upgrading to new release to keep up for new features and bug fixes.



--
This message was sent by Atlassian Jira
(v8.20.7#820007)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to