CGA-3m72-vw57-x7x9

Published

Last updated

https://images.chainguard.dev/security/CGA-3m72-vw57-x7x9

Package

spark-3.5-scala-2.13

RepositoryWolfi

Latest Update

Fixed

Fixed Version

3.5.4-r31

Aliases

GHSA-xpw8-rcwv-8f8p

Severity

Unknown

References

https://github.com/advisories/GHSA-xpw8-rcwv-8f8p

Updates

Status

Fixed

Fixed version

3.5.4-r31

Status

Pending upstream fix

Impact

This vulnerability relates to 'netty-codec-http2', which is used by one of spark's other dependencies - pyspark. This has been fixed in netty > v4.1.100, and spark has upgraded to a later version in main. However, attempts to backport to this release of spark, result in build failures. Awaiting for fix / backport from upstream to address this issue.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Private Policy

Product

Chainguard Containers Chainguard Libraries Chainguard VMs Integrations Pricing

Solutions

FedRAMP PCI DSS Golden Images CVE Remediation Public Sector

Customers

Customer Stories Chainguard Reviews

Resources

Events & Webinars Chainguard Courses Documentation Trust Center

Company

About Us Blog Partners Newsroom Careers Legal