[AMBARI-26184] Resolve snakeyaml 0.12 CVE

• Type: Story
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0
• Component/s: ambari-metrics, ambari-sever
• Labels: pull-request-available
• Assignee: Sandeep Kumar
• Reporter: Sandeep Kumar
• Created: 13/Oct/24 15:24
• Updated: 10/Dec/24 10:31
• Resolved: 12/Nov/24 06:46

Description

Resolve CVEs associated with snakeyaml in ambari-server and ambari-metrics.
It should be tested and all existing functionalities should work.
CVEs
CVE-2017-18640
CVE-2022-1471
CVE-2022-25857
CVE-2022-38749
CVE-2022-38750
CVE-2022-38751
CVE-2022-38752
CVE-2022-41854

Issue Links

• links to: GitHub PR#3869
• links to: GitHub Pull Request #136