CGA-9g43-6vm8-gxwr

Published

Last updated

https://images.chainguard.dev/security/CGA-9g43-6vm8-gxwr

Package

hadoop-fips-3.3.6

Repository

Chainguard

Latest Update

Pending upstream fix

Aliases

Severity

Unknown

References

Updates

Status

Pending upstream fix

Impact

jackson-core upgrade to 2.13.0+ requires incompatible Hadoop infrastructure changes including DynConstructors utility class. The patch from HADOOP-19259 cannot be cleanly applied to 3.3.6 due to missing infrastructure. Waiting for Apache Hadoop to officially support jackson-core 2.13.0+ in the 3.3.x branch.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Private Policy

Product

Chainguard Containers Chainguard Libraries Chainguard VMs Integrations Pricing

Solutions

FedRAMP PCI DSS Golden Images CVE Remediation Public Sector

Customers

Customer Stories Chainguard Reviews

Resources

Events & Webinars Chainguard Courses Documentation Trust Center

Company

About Us Blog Partners Newsroom Careers Legal