tree 4a7d967f517ba11e37af795d334d161de19132ed
parent b67c950380b4612a5743bd4627baf1ce93eff766
author Steve Loughran <stevel@cloudera.com> 1671449064 +0000
committer GitHub <noreply@github.com> 1671449064 +0000
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsBcBAABCAAQBQJjoEnoCRBK7hj4Ov3rIwAAg2UIAD99RVLqVCiklgStL+vZhW4d
 AAwvdp4oBGZenN/tiLahyWbT+8cLcvagd08uGcuzR6jBenH2ehiSHKvS1anDiQl4
 N+qWZufhtGB+yyvM8ZQGTVlXu30eJO/7OcXuZTwkOmogGTQVa2C7CogvLS12gKTs
 ujiq9b4/p4Z8qkF1axCegbKhBiGK41288uw6KOSgsRF2NBWK3KI6QipJ9+mphi00
 IZgtpxFcI46nC4MxnrlfpgzQAZ0p2iPWy9UFz/8pg2IOjco2/dpclI+X14tmLTe1
 2rkmw/GF5M40OQDbJ8xJMYq9bgFBlq6Lc8i2KnkNQ19iLXrHqhjlX/Ceu9uR2Dw=
 =kVUM
 -----END PGP SIGNATURE-----
 

HADOOP-18561. Update commons-net to 3.9.0 (#5214)


Addresses CVE-2021-37533, which *only* relates to FTP.

Applications not using the ftp:// filesystem, which, as
anyone who has used it will know is very minimal and
so rarely used, is not a critical part of the project.

Furthermore, the FTP-related issue is at worst information leakage
if someone connects to a malicious server.

This is a due diligence PR rather than an emergency fix.

Contributed by Steve Loughran