[
https://issues.apache.org/jira/browse/HADOOP-14799?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16362353#comment-16362353
]
Brahma Reddy Battula commented on HADOOP-14799:
-----------------------------------------------
This needs to be cherry-picked to branch-2 and branch-2.8 as there is
[CVE|https://nvd.nist.gov/vuln/detail/CVE-2017-12973#vulnDescriptionTitle]
present.
> Update nimbus-jose-jwt to 4.41.1
> --------------------------------
>
> Key: HADOOP-14799
> URL: https://issues.apache.org/jira/browse/HADOOP-14799
> Project: Hadoop Common
> Issue Type: Sub-task
> Reporter: Ray Chiang
> Assignee: Ray Chiang
> Priority: Major
> Fix For: 3.0.0-beta1
>
> Attachments: HADOOP-14799.001.patch, HADOOP-14799.002.patch,
> HADOOP-14799.003.patch
>
>
> Update the dependency
> com.nimbusds:nimbus-jose-jwt:3.9
> to the latest (4.41.1)
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org
