[ https://issues.apache.org/jira/browse/OOZIE-3369?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16650431#comment-16650431 ]
Andras Piros commented on OOZIE-3369: ------------------------------------- [~pbacsko] can you please review? Thanks! > [core] Upgrade guru.nidi:graphviz-java to 0.7.0 > ----------------------------------------------- > > Key: OOZIE-3369 > URL: https://issues.apache.org/jira/browse/OOZIE-3369 > Project: Oozie > Issue Type: Task > Components: core > Affects Versions: 5.1.0 > Reporter: Andras Piros > Assignee: Andras Piros > Priority: Major > Attachments: OOZIE-3369.001.patch > > > There are some transitive dependencies of {{guru.nidi:graphviz-java:0.2.2}} > that are obsolete and / or are subject to [security > vulnerabilities|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8013]. > Let's upgrade to latest version {{0.7.0}}. -- This message was sent by Atlassian JIRA (v7.6.3#76005)