Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-18492

upgrade commons-text to 1.10.0

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Duplicate
    • None
    • None
    • None

    Description

      Extends HADOOP-18341

      https://commons.apache.org/proper/commons-text/changes-report.html#a1.10.0

      StringInterpolator prior to v1.10.0 allowed scripting that could be problematic – a similar issue to one that led to CVE in commons-configuration2. 

      Attachments

        Issue Links

          is duplicated by

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-18497 Upgrade commons-text version to fix CVE-2022-42889

          • Major - Major loss of function.
          • Resolved
          relates to

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-18341 upgrade commons-configuration2 to 2.8.0 and commons-text to 1.9

          • Major - Major loss of function.
          • Resolved
          links to

          Web Link GitHub Pull Request #5007

          Web Link GitHub Pull Request #5008

          Activity

            People

              pj.fanning PJ Fanning
              pj.fanning PJ Fanning
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: