[HADOOP-17972] Backport HADOOP-17683 for branch-3.2

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.2.2
• Fix Version/s: 3.2.3
• Component/s: security
• Labels: pull-request-available
• Assignee: Ananya Singh
• Reporter: Ananya Singh
• Created: 20/Oct/21 05:09
• Updated: 28/Oct/21 02:48
• Resolved: 28/Oct/21 02:48

Description

Our security tool raised the following security flaw on Hadoop 3.2.2: 

CVE-2021-29425: https://nvd.nist.gov/vuln/detail/CVE-2021-29425

Issue Links

• relates to: HADOOP-17683 Update commons-io to 2.8.0
• links to: GitHub Pull Request #3573