[ https://issues.apache.org/jira/browse/SPARK-40758?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17616612#comment-17616612 ]
Sean R. Owen commented on SPARK-40758: -------------------------------------- Does the CVE affect Spark? Can we update ZK without breaking other things? Go ahead and try with a pull request > Upgrade Apache zookeeper to get rid of CVE-2020-10663 > ----------------------------------------------------- > > Key: SPARK-40758 > URL: https://issues.apache.org/jira/browse/SPARK-40758 > Project: Spark > Issue Type: Improvement > Components: Spark Core > Affects Versions: 3.3.0 > Reporter: Bilna > Priority: Major > > In order to resolve security vulnerability CVE-2020-10663, upgrade Apache > zookeeper to 3.8.0 -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@spark.apache.org For additional commands, e-mail: issues-h...@spark.apache.org