[
https://issues.apache.org/jira/browse/RANGER-839?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Colm O hEigeartaigh updated RANGER-839:
---------------------------------------
Description:
The httpcomponent dependencies in Ranger should be updated due to a number of
CVE advisories:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3577
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5262
The patch contains the following dependency updates:
httpcomponents.httpclient.version: 4.2.5 ==> 4.5.1
httpcomponents.httpcore.version: 4.2.5 ==> 4.4.3
httpcomponents.httpmime.version: 4.2.5 ==> 4.5.1
was:
The httpcomponent dependencies in Ranger should be updated due to a number of
CVE advisories:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3577
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5262
> Update httpcomponent dependencies
> ---------------------------------
>
> Key: RANGER-839
> URL: https://issues.apache.org/jira/browse/RANGER-839
> Project: Ranger
> Issue Type: Improvement
> Reporter: Colm O hEigeartaigh
> Priority: Minor
> Attachments: 0001-RANGER-839-Update-httpcomponent-dependencies.patch
>
>
> The httpcomponent dependencies in Ranger should be updated due to a number of
> CVE advisories:
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3577
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5262
> The patch contains the following dependency updates:
> httpcomponents.httpclient.version: 4.2.5 ==> 4.5.1
> httpcomponents.httpcore.version: 4.2.5 ==> 4.4.3
> httpcomponents.httpmime.version: 4.2.5 ==> 4.5.1
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
