Description
Let's address Dependabot and Dependency Check reported CVEs for CRITICAL and select HIGH severity items as appropriate. As discussed on LIVY-900, we will create an umbrella here with child tasks for sets, groups or individual CVE items. We will group them logically as appropriate by functional area and co-dependency and compatibility.
Attachments
Issue Links
- is part of
-
LIVY-900 Security and CVE Remediation Process for 0.8.0
-
- Open
-
1.
|
Address Spark Dependency Upgrades for 0.8.0 |
|
Resolved | Larry McCay | ||||||||
2.
|
Address Netty Upgrades for 0.8.0 |
|
Resolved | Larry McCay |
|
|||||||
3.
|
Address Jetty Dependency Upgrades for 0.8.0 |
|
Resolved | Larry McCay | ||||||||
4.
|
Log4j upgrade for Livy 0.8.0 version |
|
Resolved | Damon Cortesi |
|