[
https://issues.apache.org/jira/browse/PULSAR-3?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Albert Baker resolved PULSAR-3.
-------------------------------
Resolution: Invalid
This jar only gets pulled in during compile time. It is not deployed with the
system.
> Upgrade hadoop-mapreduce-client-core-2.7.4.jar to 2.7.5
> --------------------------------------------------------
>
> Key: PULSAR-3
> URL: https://issues.apache.org/jira/browse/PULSAR-3
> Project: Pulsar
> Issue Type: Improvement
> Reporter: Albert Baker
> Priority: Major
> Labels: build, easyfix, security
> Original Estimate: 5m
> Remaining Estimate: 5m
>
> OWASP Dependency check reports a /critical/ (severity 10) bug w/2.7.4
> [https://nvd.nist.gov/vuln/detail/CVE-2016-1906]
> Mitigation is to upgrade to 2.7.5
> Please update the pom.xml version #
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
