data-platform team mailing list archive

[Fabian Toepfer <mp+476967@xxxxxxxxxxxxxxxxxx>]

The proposal to merge soss/+source/hadoop:release-3.3.6-ubuntu3 into soss/+source/hadoop:lp-3.3.6 has been updated.

Description changed to:

Bumps to fixed versions in the following dependencies:
- avro (CVE-2024-47561)
- protobuf-java (CVE-2024-7254, CVE-2021-22569, CVE-2021-22570, CVE-2022-3509, CVE-2022-3510, CVE-2024-7254, CVE-2022-3171)
- nimbus-jose-jwt (CVE-2023-52428)
- dnsjava (CVE-2024-25638)
- netty-codec-http, netty-handler (CVE-2024-29025, CVE-2023-34462)

Test results: https://github.com/canonical/central-uploader/actions/runs/11896008192

For more details, see:
https://code.launchpad.net/~data-platform/soss/+source/hadoop/+git/hadoop/+merge/476967
-- 
Your team Canonical Data Platform is requested to review the proposed merge of soss/+source/hadoop:release-3.3.6-ubuntu3 into soss/+source/hadoop:lp-3.3.6.