[
https://issues.apache.org/jira/browse/HDFS-15741?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Souryakanta Dwivedy updated HDFS-15741:
---------------------------------------
Attachment: (was: Openssl_CVEs.png)
> Vulnerability fixes need for Hadoop dependency library
> -------------------------------------------------------
>
> Key: HDFS-15741
> URL: https://issues.apache.org/jira/browse/HDFS-15741
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: security
> Affects Versions: 3.1.1
> Reporter: Souryakanta Dwivedy
> Priority: Minor
>
> Vulnerability fixes need for Hadoop dependency library
> Below are the dependent library jars used for hadoop where CVEs are found
> Jackson [version 2.10.3 ]
> - jackson-core-2.10.3.jar
> CVE details :- [ CVE-2020-25649 ]
> ======================
> Jackson-core [version 2.4.0 ]
> - htrace-core-3.1.0-incubating.jar
> CVE details :- [ CVE-2020-24616 ]
> ================ =====
> Jetty [version 9.4.20.v20190813 ]
> - jetty-server-9.4.20.v20190813.jar
> CVE details :- [ CVE-2020-27216 ]
> ================ =====
> Jetty-http [version 9.4.20.v20190813 ]
> - jetty-http-9.4.20.v20190813.jar
> CVE details :- [ CVE-2020-27216 ]
> ================ =====
>
>
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org
