/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-w837-244f-v7vx

Published

Last updated

https://images.chainguard.dev/security/CGA-w837-244f-v7vx
Package

hadoop-fips-3.3.6

Repository

Chainguard

Latest Update
Pending upstream fix
Aliases
  • CVE-2023-26464
  • GHSA-vp98-w2p3-mv35

Severity

7.5

High

CVSS V3

References

  • https://nvd.nist.gov/vuln/detail/CVE-2023-26464
  • https://github.com/advisories/GHSA-vp98-w2p3-mv35

Updates

Status

Pending upstream fix

Impact

The log4j vulnerability requires upgrading to a major version that introduces breaking changes. This fix requires upstream Hadoop maintainers to implement compatibility with the newer log4j version to avoid breaking existing functionality.

Status

Under investigation

Safe Source for Open Source™
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing

Solutions

FedRAMPPCI DSSGolden ImagesCVE RemediationPublic Sector

Customers

Customer StoriesChainguard Reviews

Resources

Events & WebinarsChainguard CoursesDocumentationTrust Center

Company

About UsBlogPartnersNewsroomCareersLegal