[ 
https://issues.apache.org/jira/browse/OOZIE-3654?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17488655#comment-17488655
 ] 

Andras Salamon commented on OOZIE-3654:
---------------------------------------

I wanted to commit this change but found this issue: OOZIE-2679 
{quote}Version 4.4 of HttpClient has issued with Hadoop: HADOOP-11859
It will be fixed in Hadoop 2.8.0, until we use that we should use 4.3 of 
HttpClient.
{quote}
And there is a followup jira for upgrading to 4.4: OOZIE-2680

Right now out default hadoop version is 2.6.0 which means that committing this 
could give us errors.

I think we could increase the minimum hadoop version to 2.8.0 (2.6.0 was 
released in 2014, 2.8.0 was released in 2017) but this would be a bigger change.

CC [~dionusos] 

 

> update to httpclient 4.5.13
> ---------------------------
>
>                 Key: OOZIE-3654
>                 URL: https://issues.apache.org/jira/browse/OOZIE-3654
>             Project: Oozie
>          Issue Type: Improvement
>            Reporter: PJ Fanning
>            Assignee: PJ Fanning
>            Priority: Major
>         Attachments: OOZIE-3654-002.patch
>
>
> Due to [https://github.com/advisories/GHSA-7r82-7xv7-xcpj]
> xerces issue - https://github.com/advisories/GHSA-h65f-jvqw-m9fj



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to