[
https://issues.apache.org/jira/browse/HBASE-27731?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17703762#comment-17703762
]
Hudson commented on HBASE-27731:
--------------------------------
Results for branch master
[build #802 on
builds.a.o|https://ci-hbase.apache.org/job/HBase%20Nightly/job/master/802/]:
(/) *{color:green}+1 overall{color}*
----
details (if available):
(/) {color:green}+1 general checks{color}
-- For more information [see general
report|https://ci-hbase.apache.org/job/HBase%20Nightly/job/master/802/General_20Nightly_20Build_20Report/]
(/) {color:green}+1 jdk8 hadoop3 checks{color}
-- For more information [see jdk8 (hadoop3)
report|https://ci-hbase.apache.org/job/HBase%20Nightly/job/master/802/JDK8_20Nightly_20Build_20Report_20_28Hadoop3_29/]
(/) {color:green}+1 jdk11 hadoop3 checks{color}
-- For more information [see jdk11
report|https://ci-hbase.apache.org/job/HBase%20Nightly/job/master/802/JDK11_20Nightly_20Build_20Report_20_28Hadoop3_29/]
(/) {color:green}+1 source release artifact{color}
-- See build output for details.
(/) {color:green}+1 client integration test{color}
> Upgrade commons-validator to version 1.7
> ----------------------------------------
>
> Key: HBASE-27731
> URL: https://issues.apache.org/jira/browse/HBASE-27731
> Project: HBase
> Issue Type: Task
> Components: dependencies, security
> Reporter: Wes Schuitema
> Assignee: Wes Schuitema
> Priority: Minor
>
> The current version of commons-validator (1.6) has a dependency on
> commons-beanutils-1.9.2.jar, this dependency comes with two CVEs:
> - [CVE-2014-0114|https://nvd.nist.gov/vuln/detail/cve-2014-0114]
> - [CVE-2019-10086|https://nvd.nist.gov/vuln/detail/cve-2019-10086]
> With commons-validator version 1.7 these CVEs are no longer present.
> I've also checked the master branch for usages. The only location where
> commons-validator is used is in org.apache.hadoop.hbase.zookeeper.ZKConfig
> for validating ipv6 addresses.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
