[ https://issues.apache.org/jira/browse/HBASE-27424?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17623404#comment-17623404 ]
Hudson commented on HBASE-27424: -------------------------------- Results for branch branch-2.4 [build #446 on builds.a.o|https://ci-hbase.apache.org/job/HBase%20Nightly/job/branch-2.4/446/]: (x) *{color:red}-1 overall{color}* ---- details (if available): (x) {color:red}-1 general checks{color} (x) {color:red}-1 jdk8 hadoop2 checks{color} (/) {color:green}+1 jdk8 hadoop3 checks{color} -- For more information [see jdk8 (hadoop3) report|https://ci-hbase.apache.org/job/HBase%20Nightly/job/branch-2.4/446/JDK8_20Nightly_20Build_20Report_20_28Hadoop3_29/] (x) {color:red}-1 jdk11 hadoop3 checks{color} -- For more information [see jdk11 report|https://ci-hbase.apache.org/job/HBase%20Nightly/job/branch-2.4/446/JDK11_20Nightly_20Build_20Report_20_28Hadoop3_29/] (/) {color:green}+1 source release artifact{color} -- See build output for details. (/) {color:green}+1 client integration test{color} > Upgrade Jettison for CVE-2022-40149/40150 > ----------------------------------------- > > Key: HBASE-27424 > URL: https://issues.apache.org/jira/browse/HBASE-27424 > Project: HBase > Issue Type: Bug > Reporter: Andrew Kyle Purtell > Assignee: Andrew Kyle Purtell > Priority: Major > Fix For: 2.6.0, 2.5.1, 3.0.0-alpha-4, 2.4.15 > > > Jettison versions <= 1.5.0 are subject to CVE-2022-40149 and CVE-2022-40150. > Move jettison.version to 1.5.1. -- This message was sent by Atlassian Jira (v8.20.10#820010)