[
https://issues.apache.org/jira/browse/SPARK-13199?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sean Owen updated SPARK-13199:
------------------------------
Priority: Minor (was: Major)
Issue Type: Improvement (was: Bug)
This also was not filled.out correctly.
Ted as you probably know it is not necessarily that simple. You need to
investigate the impact of making all transitive dependencies use it. And what
happens when an earlier version is provided by Hadoop. Have you done that?
> Upgrade apache httpclient version to the latest 4.5 for security
> ----------------------------------------------------------------
>
> Key: SPARK-13199
> URL: https://issues.apache.org/jira/browse/SPARK-13199
> Project: Spark
> Issue Type: Improvement
> Components: Build
> Reporter: Ted Yu
> Priority: Minor
>
> Various SSL security fixes are needed.
> See: CVE-2012-6153, CVE-2011-4461, CVE-2014-3577, CVE-2015-5262.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
