jincongho created PARQUET-2338:
----------------------------------
Summary: CVE-2022-25168 in hadoop-common
Key: PARQUET-2338
URL: https://issues.apache.org/jira/browse/PARQUET-2338
Project: Parquet
Issue Type: Bug
Components: parquet-hadoop
Affects Versions: 1.13.1
Reporter: jincongho
[CVE-2022-25168|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25168]
requires updating hadoop-common to 3.2.4 or 3.3.3.
Although `FileUtils.untar` isnt used inparquet-hadoop, will appreciate if we
can release a new parquet-hadoop soon with these newer version. Otherwise
parquet-hadoop will be flagged as security concern too.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
