Details
-
Improvement
-
Status: Resolved
-
Trivial
-
Resolution: Fixed
-
3.2.1
-
None
Description
Some discussion related to Hadoop revealed that its FileUtil.unTar and unZip methods might have a problem if the source file does not actually exist.
It's trivial to check for this in the one place we use it in Spark, and just explicitly error if the source file does not exist.
Attachments
Issue Links
- is related to
-
HADOOP-18136 Verify FileUtils.unTar() handling of missing .tar files: Fixes CVE-2022-25168
- Resolved
- links to