[ https://issues.apache.org/jira/browse/HADOOP-18300?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17809066#comment-17809066 ]
Shilun Fan edited comment on HADOOP-18300 at 1/21/24 1:00 PM: -------------------------------------------------------------- -3.3.5 release has been fixed, fix version removed 3.4.0- was (Author: slfan1989): 3.3.5 release has been fixed, fix version removed 3.4.0 > Update google-gson to 2.9.0 > --------------------------- > > Key: HADOOP-18300 > URL: https://issues.apache.org/jira/browse/HADOOP-18300 > Project: Hadoop Common > Issue Type: Task > Components: build > Reporter: Igor Dvorzhak > Assignee: Igor Dvorzhak > Priority: Minor > Labels: pull-request-available > Fix For: 3.4.0, 3.2.4, 3.3.5 > > Time Spent: 2h > Remaining Estimate: 0h > > Update to the Gson 2.9.0 that has many > [fixes|https://github.com/google/gson/releases/tag/gson-parent-2.9.0], and > backward-compatible as long as Java 7+ is used. > Fixes CVE-2022-25647; Dos when unmarshalling data -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: common-issues-h...@hadoop.apache.org