[ 
https://issues.apache.org/jira/browse/OOZIE-3369?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16650431#comment-16650431
 ] 

Andras Piros commented on OOZIE-3369:
-------------------------------------

[~pbacsko] can you please review? Thanks!

> [core] Upgrade guru.nidi:graphviz-java to 0.7.0
> -----------------------------------------------
>
>                 Key: OOZIE-3369
>                 URL: https://issues.apache.org/jira/browse/OOZIE-3369
>             Project: Oozie
>          Issue Type: Task
>          Components: core
>    Affects Versions: 5.1.0
>            Reporter: Andras Piros
>            Assignee: Andras Piros
>            Priority: Major
>         Attachments: OOZIE-3369.001.patch
>
>
> There are some transitive dependencies of {{guru.nidi:graphviz-java:0.2.2}} 
> that are obsolete and / or are subject to [security 
> vulnerabilities|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8013].
>  Let's upgrade to latest version {{0.7.0}}.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to