[
https://issues.apache.org/jira/browse/AMBARI-24789?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16652124#comment-16652124
]
ASF GitHub Bot commented on AMBARI-24789:
-----------------------------------------
oleewere closed pull request #9: AMBARI-24789. LogFeeder: fix CVE-2018-11771 -
upgrade commons-compress lib
URL: https://github.com/apache/ambari-logsearch/pull/9
This is a PR merged from a forked repository.
As GitHub hides the original diff on merge, it is displayed below for
the sake of provenance:
As this is a foreign pull request (from a fork), the diff is supplied
below (as it won't show otherwise due to GitHub magic):
diff --git a/ambari-logsearch-logfeeder/pom.xml
b/ambari-logsearch-logfeeder/pom.xml
index 8b89ff686c..1f8a20c2a5 100644
--- a/ambari-logsearch-logfeeder/pom.xml
+++ b/ambari-logsearch-logfeeder/pom.xml
@@ -152,7 +152,7 @@
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-compress</artifactId>
- <version>1.16.1</version>
+ <version>1.18</version>
</dependency>
<dependency>
<groupId>com.fasterxml.jackson.dataformat</groupId>
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
> LogFeeder: fix CVE-2018-11771 - upgrade commons-compress lib
> ------------------------------------------------------------
>
> Key: AMBARI-24789
> URL: https://issues.apache.org/jira/browse/AMBARI-24789
> Project: Ambari
> Issue Type: Bug
> Components: ambari-logsearch
> Affects Versions: 2.7.1
> Reporter: Olivér Szabó
> Assignee: Olivér Szabó
> Priority: Major
> Labels: pull-request-available
> Fix For: 2.7.3
>
> Time Spent: 40m
> Remaining Estimate: 0h
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
