tomicooler commented on PR #5623:
URL: https://github.com/apache/hadoop/pull/5623#issuecomment-1570310784

   Hi @devaspatikrishnatri ,
   
   you can re-trigger the build by creating an empty commit `git commit 
--allow-empty -m "Trigger the jenkins job"` then pushing it to your fork's 
branch `git push origin HADOOP-18732`.
   
   I think the reason for this exclusion should be documented in the Jira, as 
far as I know the reason being:
   
   ```
   An older version of Jetty is being pulled in by jersey-json artifact in 
hadoop-yarn-common, which contains CVEs.
   ```
   
   https://mvnrepository.com/artifact/com.sun.jersey/jersey-json/1.19.4
   
   
   BTW jackson-mapper-asl 1.9.2 has also 2 CVEs 
(https://mvnrepository.com/artifact/org.codehaus.jackson/jackson-mapper-asl/1.9.2).
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org

Reply via email to