[
https://issues.apache.org/jira/browse/HADOOP-12577?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Wei-Chiu Chuang updated HADOOP-12577:
-------------------------------------
Attachment: HADOOP-12577.001.patch
Only hadoop-project/pom.xml contains commons-collections version 3.2.1
find . -name pom.xml -print0 | xargs -0 grep -C 2 -e 'commons-collections'
./hadoop-common-project/hadoop-common/pom.xml- </dependency>
./hadoop-common-project/hadoop-common/pom.xml- <dependency>
./hadoop-common-project/hadoop-common/pom.xml:
<groupId>commons-collections</groupId>
./hadoop-common-project/hadoop-common/pom.xml:
<artifactId>commons-collections</artifactId>
./hadoop-common-project/hadoop-common/pom.xml- <scope>compile</scope>
./hadoop-common-project/hadoop-common/pom.xml- </dependency>
--
--
./hadoop-mapreduce-project/hadoop-mapreduce-client/pom.xml- </dependency>
./hadoop-mapreduce-project/hadoop-mapreduce-client/pom.xml- <dependency>
./hadoop-mapreduce-project/hadoop-mapreduce-client/pom.xml:
<groupId>commons-collections</groupId>
./hadoop-mapreduce-project/hadoop-mapreduce-client/pom.xml:
<artifactId>commons-collections</artifactId>
./hadoop-mapreduce-project/hadoop-mapreduce-client/pom.xml-
<scope>provided</scope>
./hadoop-mapreduce-project/hadoop-mapreduce-client/pom.xml- </dependency>
--
--
./hadoop-project/pom.xml- </dependency>
./hadoop-project/pom.xml- <dependency>
./hadoop-project/pom.xml: <groupId>commons-collections</groupId>
./hadoop-project/pom.xml: <artifactId>commons-collections</artifactId>
./hadoop-project/pom.xml- <version>3.2.2</version>
./hadoop-project/pom.xml- </dependency>
--
--
./hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-applicationhistoryservice/pom.xml-
./hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-applicationhistoryservice/pom.xml-
<dependency>
./hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-applicationhistoryservice/pom.xml:
<groupId>commons-collections</groupId>
./hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-applicationhistoryservice/pom.xml:
<artifactId>commons-collections</artifactId>
./hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-applicationhistoryservice/pom.xml-
</dependency>
./hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-applicationhistoryservice/pom.xml-
> Bump up commons-collections version to 3.2.2 to address a security flaw
> -----------------------------------------------------------------------
>
> Key: HADOOP-12577
> URL: https://issues.apache.org/jira/browse/HADOOP-12577
> Project: Hadoop Common
> Issue Type: Bug
> Reporter: Wei-Chiu Chuang
> Assignee: Wei-Chiu Chuang
> Attachments: HADOOP-12577.001.patch
>
>
> Update commons-collections from 3.2.1 to 3.2.2.
> See
> https://issues.apache.org/jira/browse/COLLECTIONS-580
> https://blogs.apache.org/foundation/entry/apache_commons_statement_to_widespread
> http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
