[ 
https://issues.apache.org/jira/browse/DRILL-8200?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17529993#comment-17529993
 ] 

ASF GitHub Bot commented on DRILL-8200:
---------------------------------------

jnturton opened a new pull request, #2525:
URL: https://github.com/apache/drill/pull/2525

   # [DRILL-8200](https://issues.apache.org/jira/browse/DRILL-8200): Update 
Hadoop libs to ≥ 3.2.3 for CVE-2022-26612
   
   (Please replace `PR Title` with actual PR Title)
   
   ## Description
   
   (Please describe the change. If more than one ticket is fixed, include a 
reference to those tickets.)
   
   ## Documentation
   (Please describe user-visible changes similar to what should appear in the 
Drill documentation.)
   
   ## Testing
   (Please describe how this PR has been tested.)
   




> Update Hadoop libs to ≥ 3.2.3 for CVE-2022-26612
> ------------------------------------------------
>
>                 Key: DRILL-8200
>                 URL: https://issues.apache.org/jira/browse/DRILL-8200
>             Project: Apache Drill
>          Issue Type: Bug
>          Components: library
>    Affects Versions: 1.20.0
>            Reporter: James Turton
>            Assignee: James Turton
>            Priority: Critical
>             Fix For: 2.0.0
>
>
> Note: part of upgrading Drill's Hadoop libs is incorporating a new build of 
> winutils with matching version number, and currently there is not one 
> published at [https://github.com/cdarlint/winutils].



--
This message was sent by Atlassian Jira
(v8.20.7#820007)

Reply via email to