[ZOOKEEPER-4617] Upgrade apache-rat-tasks to resolve CVEs

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Labels: pull-request-available
• Assignee: Unassigned
• Reporter: hang chen
• Created: 27/Sep/22 02:28
• Updated: 27/Oct/22 11:28

Description

The org.apache.rat:apache-rat-tasks@0.6 has two CVEs

• CVE-2015-4852
• CVE-2015-7501

The introduction path is: 

org.apache.zookeeper:zookeeper-contrib-zooinspector@3.9.0-SNAPSHOT › org.apache.rat:apache-rat-tasks@0.6 › org.apache.rat:apache-rat-core@0.6 › commons-collections:commons-collections@3.2

Fix: Upgrade to org.apache.rat:apache-rat-tasks@0.12

 

The GitHub PR: https://github.com/apache/zookeeper/pull/1928

Issue Links

• links to: GitHub Pull Request #1928