Siyao Meng created HADOOP-17820: ----------------------------------- Summary: Remove dependency on jdom Key: HADOOP-17820 URL: https://issues.apache.org/jira/browse/HADOOP-17820 Project: Hadoop Common Issue Type: Improvement Reporter: Siyao Meng Assignee: Siyao Meng
It doesn't seem that jdom is referenced anywhere in the code base now, yet it exists in the distribution. {code} $ find . -name "*jdom*.jar" ./hadoop-3.4.0-SNAPSHOT/share/hadoop/tools/lib/jdom-1.1.jar {code} There is recently [CVE-2021-33813|https://github.com/advisories/GHSA-2363-cqg2-863c] issued for jdom. Let's remove the binary from the dist if not useful. -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: common-dev-unsubscr...@hadoop.apache.org For additional commands, e-mail: common-dev-h...@hadoop.apache.org