[HDFS-16410] Insecure Xml parsing in OfflineEditsXmlLoader - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Bug
Status: Resolved
Priority: Minor
Resolution: Fixed
Affects Version/s: 3.3.1
Fix Version/s: 3.4.0, 2.10.2, 3.2.3, 3.3.2
Component/s: tools
Labels:
- pull-request-available
- security

Target Version/s:

3.4.0, 2.10.2, 3.2.3, 3.3.2
Hadoop Flags:

Reviewed

Description

Insecure Xml parsing in OfflineEditsXmlLoader

https://github.com/apache/hadoop/blob/03cfc852791c14fad39db4e5b14104a276c08e59/hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/tools/offlineEditsViewer/OfflineEditsXmlLoader.java#L88

Attachments

Issue Links

relates to

HDFS-16766 hdfs ec command loads (administrator provided) erasure code policy files without disabling xml entity expansion

Resolved

links to

GitHub Pull Request #3854

Activity

People

Assignee:: Ashutosh Gupta

Reporter:: Ashutosh Gupta

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Dates

Created:: 04/Jan/22 12:35

Updated:: 11/Feb/24 23:28

Resolved:: 05/Jan/22 18:02

Time Tracking

Estimated:

Not Specified

Remaining:

0h

Logged:

1h 20m