[SPARK-41030] Upgrade Apache Ivy to 2.5.1

• Type: Dependency upgrade
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.4.0
• Fix Version/s: 3.2.4, 3.3.2, 3.4.0
• Component/s: Build
• Assignee: Bjørn Jørgensen
• Reporter: Bjørn Jørgensen
• Created: 07/Nov/22 17:47
• Updated: 04/Jan/23 01:24
• Resolved: 08/Nov/22 00:16

Description

CVE-2022-37865
and
CVE-2022-37866

Issue Links

• is related to: SPARK-41686 Upgrade Apache Ivy to 2.5.1
• links to: [Github] Pull Request #38539 (bjornjorgensen)
• links to: [Github] Pull Request #39176 (tobiasstadler)
• links to: [Github] Pull Request #39176 (tobiasstadler)
• links to: [Github] Pull Request #39371 (bjornjorgensen)