[ 
https://issues.apache.org/jira/browse/HADOOP-18587?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17654601#comment-17654601
 ] 

ASF GitHub Bot commented on HADOOP-18587:
-----------------------------------------

pjfanning commented on PR #5270:
URL: https://github.com/apache/hadoop/pull/5270#issuecomment-1371305171

   @cnauroth there are test failures and some of them seem to relate to 
jettison changes. I'm not sure how semver applies when they make breaking 
changes in a patch level release. I'll have a look at the tests. 




> upgrade to jettison 1.5.2 due to security issue
> -----------------------------------------------
>
>                 Key: HADOOP-18587
>                 URL: https://issues.apache.org/jira/browse/HADOOP-18587
>             Project: Hadoop Common
>          Issue Type: Task
>          Components: common
>            Reporter: PJ Fanning
>            Priority: Major
>              Labels: pull-request-available
>
> https://github.com/advisories/GHSA-x27m-9w8j-5vcw



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to