[IMPALA-11229] Upgrade spring version to 5.3.18 to address CVEs - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Task
Status: Resolved
Priority: Blocker
Resolution: Fixed
Affects Version/s: Impala 4.1.0
Fix Version/s: Impala 4.1.0
Component/s: Frontend
Labels:
None

Target Version:

Impala 4.1.0
Epic Color:
ghx-label-3

Description

The current version of Spring that we use is subject to some vulnerabilities that were announced recently (CVE-2022-22965, CVE-2022-22950, CVE-2021-22060). We should upgrade to 5.3.18 to address these CVEs.

Attachments

Activity

People

Assignee:: Joe McDonnell

Reporter:: Joe McDonnell

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Dates

Created:: 06/Apr/22 16:22

Updated:: 13/Apr/22 15:39

Resolved:: 13/Apr/22 15:39