Update pom.xml to use hadoop version 3.2.4 #256
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Update pom.xml to use hadoop version 3.3.3 to remediate security vulnerabilities CVE-2021-37404 CVE-2022-26612 This addresses the issue raised here: confluentinc/kafka-connect-storage-cloud#508
|
|
tojaroslaw
changed the title
tooptoop4
approved these changes
Jul 27, 2022
3.2.4 just got released, my company tested with this latest patch and things still works
tojaroslaw
changed the title
|
My team is tracking these CVEs. Any chance this PR will be going in soon? |
|
@kkonstantine, would you be able to review this dependency update? This is required to resolve two critical security vulnerabilities. |
|
Is this PR going to get merged soon? |
|
I'd love to be able to merge this if someone from confluent could review it |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Update pom.xml to use hadoop version 3.3.3 to remediate security vulnerabilities
CVE-2021-37404
CVE-2022-26612
This addresses the issue raised here:
confluentinc/kafka-connect-storage-cloud#508
Problem
Solution
Does this solution apply anywhere else?
If yes, where?
Test Strategy
Testing done:
Release Plan