[
https://issues.apache.org/jira/browse/HADOOP-17223?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17212115#comment-17212115
]
Akira Ajisaka commented on HADOOP-17223:
----------------------------------------
The latest version is 4.5.13 and the prior versions are affected by
CVE-2020-13956:
https://lists.apache.org/thread.html/r6dab7da30f8bf075f79ee189e33b45a197502e2676481bb8787fc0d7%40%3Cdev.hc.apache.org%3E
> update org.apache.httpcomponents:httpclient to 4.5.12 and httpcore to 4.4.13
> -----------------------------------------------------------------------------
>
> Key: HADOOP-17223
> URL: https://issues.apache.org/jira/browse/HADOOP-17223
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 3.3.0
> Reporter: Pranav Bheda
> Priority: Major
> Attachments: HADOOP-17223.001.patch
>
>
> Update the dependencies
> * org.apache.httpcomponents:httpclient from 4.5.6 to 4.5.12
> * org.apache.httpcomponents:httpcore from 4.4.10 to 4.4.13
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org
