[ 
https://issues.apache.org/jira/browse/HADOOP-20033?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Ayush Saxena resolved HADOOP-20033.
-----------------------------------
    Fix Version/s: 3.6.0
     Hadoop Flags: Reviewed
       Resolution: Fixed

> bump lz4-java to 1.12.0 due to CVEs
> -----------------------------------
>
>                 Key: HADOOP-20033
>                 URL: https://issues.apache.org/jira/browse/HADOOP-20033
>             Project: Hadoop Common
>          Issue Type: Task
>            Reporter: PJ Fanning
>            Assignee: PJ Fanning
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 3.6.0
>
>
> https://github.com/yawkat/lz4-java/releases
> 1.11.4 has CVE fixes but seems like a good idea to use latest version.



--
This message was sent by Atlassian Jira
(v10.3.26#10030026)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to