[HBASE-27586] Bump up commons-codec to 1.15 - ASF JIRA

Log work

Agile Board

Rank to Top

Rank to Bottom

Attach files

Attach Screenshot

Bulk Copy Attachments

Bulk Move Attachments

Voters

Watch issue

Watchers

Create sub-task

Convert to sub-task

Move

Link

Clone

Labels

Update Comment Author

Replace String in Comment

Update Comment Visibility

Delete Comments

XML

Word

Printable

JSON

Details

Type: Bug
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 2.6.0, 3.0.0-alpha-4, 2.4.16, 2.5.3
Component/s: dependencies, security
Labels:
None

Hadoop Flags:

Reviewed

Description

commons-codec 1.15 has proper fix of few CVEs which may not effect in HBase but better to upgrade to ensure compliance.
Ex: While a fix was earlier made to commons-codec:commons-codec version 1.13, it was later found out to be incomplete. A complete fix exists in version 1.14 and that is the version users should upgrade to.