jiaan.geng created SPARK-29252:
----------------------------------

             Summary: Upgrade zookeeper to 3.4.14 and fix vulnerabilities.
                 Key: SPARK-29252
                 URL: https://issues.apache.org/jira/browse/SPARK-29252
             Project: Spark
          Issue Type: Dependency upgrade
          Components: Build
    Affects Versions: 3.0.0
            Reporter: jiaan.geng
             Fix For: 3.0.0


The current code uses org.apache.zookeeper:zookeeper:jar:3.4.6 and it will 
cause a security vulnerabilities. We could get some security info fromĀ 
https://www.tenable.com/cve/CVE-2019-0201

This reference remind to upgrate the version of `zookeeper` to 3.4.14 or later.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@spark.apache.org
For additional commands, e-mail: issues-h...@spark.apache.org

Reply via email to