hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sean Mackrory (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HADOOP-13659) Upgrade jaxb-api version
Date Thu, 20 Oct 2016 15:45:58 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-13659?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15592173#comment-15592173
] 

Sean Mackrory commented on HADOOP-13659:
----------------------------------------

For what it's worth while we wait for a response, upgrading to 2.2.11 is a perfectly acceptable
outcome here to me. 2.2.2 is referenced by several CVEs. While I don't think any of them are
critical (IIRC they're considered low risk, maybe medium at worst), it's a step in the right
direction to upgrade, all other things being equal. 2.2.11 resolves all those issues too.

> Upgrade jaxb-api version
> ------------------------
>
>                 Key: HADOOP-13659
>                 URL: https://issues.apache.org/jira/browse/HADOOP-13659
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: build
>    Affects Versions: 3.0.0-alpha2
>            Reporter: Sean Mackrory
>            Assignee: Sean Mackrory
>         Attachments: HADOOP-13659.001.patch
>
>
> We're currently pulling in version 2.2.2 - I think we should upgrade to the latest 2.2.12.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org


Mime
View raw message