[
https://issues.apache.org/jira/browse/HADOOP-18068?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Steve Loughran updated HADOOP-18068:
------------------------------------
Release Note: The AWS SDK bundle JAR has been upgraded to 1.12.132; other
than a test failure this has proven stable. The versions of key shaded
dependencies are: jackson @ 2.12.3 and [email protected]. Although 1.11.x SDK
bundles include a jackson version with known CVEs, the uses made of it by the
AWS client are not believed to be vulnerable.
> upgrade AWS SDK to 1.12.132
> ---------------------------
>
> Key: HADOOP-18068
> URL: https://issues.apache.org/jira/browse/HADOOP-18068
> Project: Hadoop Common
> Issue Type: Sub-task
> Components: build, fs/s3
> Affects Versions: 3.3.2
> Reporter: Steve Loughran
> Assignee: Steve Loughran
> Priority: Major
> Labels: pull-request-available
> Fix For: 3.3.4
>
> Time Spent: 2h 20m
> Remaining Estimate: 0h
>
> With this update, the versions of key shaded dependencies are
> jackson 2.12.3
> httpclient 4.5.13
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
