[
https://issues.apache.org/jira/browse/HBASE-26717?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17484871#comment-17484871
]
Andrew Kyle Purtell commented on HBASE-26717:
---------------------------------------------
bq. are we planning on hbase-thirdparty 3.5.2+ releases?
There could be a need. If hbase-thirdparty is bringing in something with CVE
vulns future 2.4.x releases would want one.
> [hbase-thirdparty] hbase-shaded-jersey packages unshaded classes
> ----------------------------------------------------------------
>
> Key: HBASE-26717
> URL: https://issues.apache.org/jira/browse/HBASE-26717
> Project: HBase
> Issue Type: Task
> Environment: Apache Maven 3.6.3
> Java version: 1.8.0_312, vendor: Andrew Purtell, runtime: /opt/java-8/jre
> Default locale: en_US, platform encoding: UTF-8
> OS name: "linux", version: "5.10.0-11-arm64", arch: "aarch64", family: "unix"
> Reporter: Andrew Kyle Purtell
> Priority: Minor
>
> Found artifact with unexpected contents:
> '/home/apurtell/src/hbase/hbase-shaded/hbase-shaded-mapreduce/target/hbase-shaded-mapreduce-2.5.0-SNAPSHOT.jar'
> com/sun/activation/
> javax/activation/
> javax/xml/bind/
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
