[AMBARI-24429] Remove dependencies with CVE issues from Ambari Agent

• Type: Task
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.7.1
• Fix Version/s: 2.7.1
• Component/s: ambari-agent
• Labels: cleanup pull-request-available
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 08/Aug/18 17:51
• Updated: 09/Aug/18 15:11
• Resolved: 09/Aug/18 14:03

Description

Remove dependencies with CVE issues from Ambari Agent

• org.apache.commons:commons-collections4:jar before version 4.0-alpha1-RC1
  • CVE-2015-6420 - https://nvd.nist.gov/vuln/detail/CVE-2015-6420

[INFO] org.apache.ambari.contrib.views:ambari-views-utils:jar:2.0.0.0-SNAPSHOT
[INFO] \- org.apache.commons:commons-collections4:jar:4.0:compile

Issue Links

• links to: GitHub Pull Request #1999
• links to: GitHub Pull Request #2000