[STORM-3900] Upgrade Cassandra version to avoid depedency on snakeyaml 1.3 - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Dependency upgrade
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 2.5.0
Component/s: None
Labels:
None

Description

Snakeyaml 1.3 has a security vulnerability. Cassandra version is storm has pulls in this version. Upgrade Cassandra to a version that uses snakeyaml 2.0.

See Storm snakeyaml 2.0 upgrade in PR: https://github.com/apache/storm/pull/3523

Attachments

Activity

People

Assignee:: Unassigned

Reporter:: Bipin Prasad

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 10/Mar/23 14:23

Updated:: 23/Oct/23 14:31

Resolved:: 14/Jun/23 00:29

Time Tracking

Estimated:

Not Specified

Remaining:

Logged:

1h 50m