Steve Loughran created HADOOP-19172:
---------------------------------------
Summary: Upgrade aws-java-sdk to 1.12.720
Key: HADOOP-19172
URL: https://issues.apache.org/jira/browse/HADOOP-19172
Project: Hadoop Common
Issue Type: Improvement
Components: build, fs/s3
Affects Versions: 3.3.6, 3.4.0
Reporter: Steve Loughran
Update to the latest AWS SDK, to stop anyone worrying about the ion library CVE
https://nvd.nist.gov/vuln/detail/CVE-2024-21634
This isn't exposed in the s3a client, but may be used downstream.
on v2 sdk releases, the v1 sdk is only used during builds; 3.3.x it is shipped
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-dev-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-dev-h...@hadoop.apache.org
