Kousuke Saruta created SPARK-36129: -------------------------------------- Summary: Upgrade commons-compress to 1.21 to deal with CVEs Key: SPARK-36129 URL: https://issues.apache.org/jira/browse/SPARK-36129 Project: Spark Issue Type: Bug Components: Build Affects Versions: 3.1.2, 3.0.3, 2.4.8, 3.2.0, 3.3.0 Reporter: Kousuke Saruta Assignee: Kousuke Saruta
Some CVEs which affect commons-compress 1.20 are reported and fixed in 1.21. https://commons.apache.org/proper/commons-compress/security-reports.html -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@spark.apache.org For additional commands, e-mail: issues-h...@spark.apache.org