[ 
https://issues.apache.org/jira/browse/YARN-10037?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16999002#comment-16999002
 ] 

Masatake Iwasaki commented on YARN-10037:
-----------------------------------------

I tried sevral versions of Node.js. The highest version to which we can easily 
update is v8. Though [the v8 will be EoL on 
2019-12-13|https://nodejs.org/en/about/releases/], how about updating to 
Node.js v8.17.0 (latest in v8) and Yarn 1.21.1 (latest) as a first aid here? I 
attached 001 for this without clicking "Submit Patch" since it will not invoke 
{{-Pyarn-ui}} build.

> Upgrade build tools for YARN Web UI v2
> --------------------------------------
>
>                 Key: YARN-10037
>                 URL: https://issues.apache.org/jira/browse/YARN-10037
>             Project: Hadoop YARN
>          Issue Type: Bug
>          Components: build, security, yarn-ui-v2
>            Reporter: Akira Ajisaka
>            Assignee: Masatake Iwasaki
>            Priority: Major
>         Attachments: YARN-10037.001.patch
>
>
> The versions of the build tools are too old and have some vulnerabilities. 
> Update.
> * node: 5.12.0 (latest: 12.13.1 LTS)
> * yarn: 0.21.3 (latest: 1.12.1)



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to