[
https://issues.apache.org/jira/browse/HDFS-15741?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Souryakanta Dwivedy updated HDFS-15741:
---------------------------------------
Description:
Vulnerability fixes need for Jackson Hadoop dependency library
Below are the Jackson library jars used for hadoop where CVEs are found
Jackson [version 2.10.3 ]
- jackson-core-2.10.3.jar
CVE details :- [ CVE-2020-25649 ]
======================
Jackson-core [version 2.4.0 ]
- htrace-core-3.1.0-incubating.jar
CVE details :- [ CVE-2020-24616 ]
================ =====
was:
Vulnerability fixes need for Hadoop dependency library
Below are the dependent library jars used for hadoop where CVEs are found
Jackson [version 2.10.3 ]
- jackson-core-2.10.3.jar
CVE details :- [ CVE-2020-25649 ]
======================
Jackson-core [version 2.4.0 ]
- htrace-core-3.1.0-incubating.jar
CVE details :- [ CVE-2020-24616 ]
================ =====
Jetty [version 9.4.20.v20190813 ]
- jetty-server-9.4.20.v20190813.jar
CVE details :- [ CVE-2020-27216 ]
================ =====
Jetty-http [version 9.4.20.v20190813 ]
- jetty-http-9.4.20.v20190813.jar
CVE details :- [ CVE-2020-27216 ]
================ =====
Summary: Vulnerability fixes need for Jackson Hadoop dependency library
(was: Vulnerability fixes need for Hadoop dependency library )
> Vulnerability fixes need for Jackson Hadoop dependency library
> ---------------------------------------------------------------
>
> Key: HDFS-15741
> URL: https://issues.apache.org/jira/browse/HDFS-15741
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: security
> Affects Versions: 3.1.1
> Reporter: Souryakanta Dwivedy
> Priority: Minor
> Attachments: CVEs_found.png
>
>
> Vulnerability fixes need for Jackson Hadoop dependency library
> Below are the Jackson library jars used for hadoop where CVEs are found
> Jackson [version 2.10.3 ]
> - jackson-core-2.10.3.jar
> CVE details :- [ CVE-2020-25649 ]
> ======================
> Jackson-core [version 2.4.0 ]
> - htrace-core-3.1.0-incubating.jar
> CVE details :- [ CVE-2020-24616 ]
> ================ =====
>
>
>
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org
