[HADOOP-18354] Upgrade reload4j to 1.2.22 due to XXE vulnerability

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.3.4
• Labels: pull-request-available
• Hadoop Flags: Reviewed
• Assignee: PJ Fanning
• Reporter: PJ Fanning
• Created: 21/Jul/22 22:33
• Updated: 29/Jul/22 12:16
• Resolved: 24/Jul/22 10:32

Description

https://github.com/qos-ch/reload4j/issues/53 fixed in reload4j 1.2.22

Issue Links

• relates to: HBASE-27239 Upgrade reload4j due to XXE vulnerability
• links to: GitHub Pull Request #4607
• links to: GitHub Pull Request #4635