[
https://issues.apache.org/jira/browse/SOLR-15355?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17373721#comment-17373721
]
ASF subversion and git services commented on SOLR-15355:
--------------------------------------------------------
Commit f1bb7f26894f31824b4a8fdf93cdb744928a690a in lucene-solr's branch
refs/heads/branch_8x from Antoine Gruzelle
[ https://gitbox.apache.org/repos/asf?p=lucene-solr.git;h=f1bb7f2 ]
SOLR-15355 - Upgrade Hadoop to 3.2.2 (#2520)
>From 3.2.0
> CVE-2020-9492: Upgrade hadoop-hdfs-client to 3.2.2
> --------------------------------------------------
>
> Key: SOLR-15355
> URL: https://issues.apache.org/jira/browse/SOLR-15355
> Project: Solr
> Issue Type: Bug
> Components: hdfs, security
> Affects Versions: 8.6, 8.6.2
> Reporter: Nazerke Seidan
> Priority: Major
> Time Spent: 1.5h
> Remaining Estimate: 0h
>
> CVE-2020-9492 vuln. issue is found in 8x component
> maven:org.apache.hadoop:hadoop-hdfs-client (version3.2.0) It seems with the
> version 3.2.0 hdfs client might send authorization header to remote url
> without verification.
> ([https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9492])
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
