[
https://issues.apache.org/jira/browse/HBASE-26329?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17425554#comment-17425554
]
Peter Somogyi commented on HBASE-26329:
---------------------------------------
bq. So I think this one could supersede HBASE-26291?
Sure, we can upgrade commons-io to 2.11.0 directly.
[~apurtell] Are you fine with upgrading commons-io in branch-2.4 to move away
from known vulnerability.
> Upgrade commons-io to 2.11.0
> ----------------------------
>
> Key: HBASE-26329
> URL: https://issues.apache.org/jira/browse/HBASE-26329
> Project: HBase
> Issue Type: Task
> Components: dependencies
> Reporter: Peter Somogyi
> Assignee: Peter Somogyi
> Priority: Major
> Fix For: 2.5.0, 3.0.0-alpha-2
>
>
> The 2.11.0 version got released from commons-io.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
