[ https://issues.apache.org/jira/browse/SPARK-33762?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17248273#comment-17248273 ]
Apache Spark commented on SPARK-33762: -------------------------------------- User 'n-marion' has created a pull request for this issue: https://github.com/apache/spark/pull/30740 > Bump commons-codec to latest version. > -------------------------------------- > > Key: SPARK-33762 > URL: https://issues.apache.org/jira/browse/SPARK-33762 > Project: Spark > Issue Type: Dependency upgrade > Components: Build > Affects Versions: 2.4.7, 3.0.1 > Reporter: Nicholas Marion > Priority: Major > > Currently Spark pulls in commons-codec version 2.10 which was released 6 > years ago. Some Open Source scans have found a possible encoding/decoding > concern related to versions prior to 2.13: > [https://github.com/apache/commons-codec/commit/48b615756d1d770091ea3322eefc08011ee8b113] > Upgrade to the latest version of commons-codec in order to include this fix. -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@spark.apache.org For additional commands, e-mail: issues-h...@spark.apache.org