[jira] [Commented] (SPARK-35517) Critical Vulnerabilities: jackson-databind 2.4.0 shipped with htrace-core4-4.1.0-incubating.jar

2022-06-07 Thread Maksim Grinman (Jira)
[ https://issues.apache.org/jira/browse/SPARK-35517?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17551290#comment-17551290 ] Maksim Grinman commented on SPARK-35517: Spark 3.2.1 still ships with

[jira] [Commented] (SPARK-35517) Critical Vulnerabilities: jackson-databind 2.4.0 shipped with htrace-core4-4.1.0-incubating.jar

2021-07-20 Thread Sean R. Owen (Jira)
[ https://issues.apache.org/jira/browse/SPARK-35517?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17384395#comment-17384395 ] Sean R. Owen commented on SPARK-35517: -- Spark 3.2 is coming in a month or so. Spark doesn't use it

[jira] [Commented] (SPARK-35517) Critical Vulnerabilities: jackson-databind 2.4.0 shipped with htrace-core4-4.1.0-incubating.jar

2021-05-26 Thread Louis DEFLANDRE (Jira)
[ https://issues.apache.org/jira/browse/SPARK-35517?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17351607#comment-17351607 ] Louis DEFLANDRE commented on SPARK-35517: - Good to know, thanks. Just to be sure we don't miss

[jira] [Commented] (SPARK-35517) Critical Vulnerabilities: jackson-databind 2.4.0 shipped with htrace-core4-4.1.0-incubating.jar

2021-05-25 Thread Vinod KC (Jira)
[ https://issues.apache.org/jira/browse/SPARK-35517?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17351134#comment-17351134 ] Vinod KC commented on SPARK-35517: -- [~ldeflandre], In Spark 3.2.0, SPARK-34784 upgraded,