[
https://issues.apache.org/jira/browse/HADOOP-12767?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15163315#comment-15163315
]
Artem Aliev commented on HADOOP-12767:
--------------------------------------
[~jojochuang], I surprise the fix works for you, I got an compilation error
with 4.3.6 and 4.5.1
{code}
#> man test
....
[INFO] Apache Hadoop Auth ................................. FAILURE [ 15.191 s]
...
[ERROR] Failed to execute goal
org.apache.maven.plugins:maven-compiler-plugin:3.1:testCompile
(default-testCompile) on project hadoop-auth: Compilation failure
[ERROR]
/Users/artemaliev/git/hadoop-test/hadoop-common-project/hadoop-auth/src/test/java/org/apache/hadoop/security/authentication/client/AuthenticatorTestCase.java:[246,32]
cannot access org.apache.http.config.Lookup
[ERROR] class file for org.apache.http.config.Lookup not found
[ERROR] -> [Help 1]
{code}
> update apache httpclient version to the latest 4.5 for security
> ---------------------------------------------------------------
>
> Key: HADOOP-12767
> URL: https://issues.apache.org/jira/browse/HADOOP-12767
> Project: Hadoop Common
> Issue Type: Bug
> Reporter: Artem Aliev
> Assignee: Wei-Chiu Chuang
> Attachments: HADOOP-12767.001.patch
>
>
> Various SSL security fixes are needed. See: CVE-2012-6153, CVE-2011-4461,
> CVE-2014-3577, CVE-2015-5262.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
