[HADOOP-17220] Upgrade slf4j to 1.7.30 ( To Address: CVE-2018-8088)

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.3.1, 3.4.0
• Fix Version/s: 3.3.1, 3.4.0
• Component/s: build, common
• Target Version/s: 3.3.1, 3.4.0
• Hadoop Flags: Reviewed
• Assignee: Brahma Reddy Battula
• Reporter: Brahma Reddy Battula
• Created: 24/Aug/20 10:51
• Updated: 11/Feb/24 13:00
• Resolved: 24/Aug/20 13:37

Description

To address the following CVE, upgrade the slf4j to latest stable release 1.7.30.

https://nvd.nist.gov/vuln/detail/CVE-2018-8088
 

Note: We don't use EventData but should consider upgrading.