[
https://issues.apache.org/jira/browse/HADOOP-19942?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18098160#comment-18098160
]
ASF GitHub Bot commented on HADOOP-19942:
-----------------------------------------
pjfanning commented on PR #8619:
URL: https://github.com/apache/hadoop/pull/8619#issuecomment-5045562312
@steveloughran it would be great if creating backport PRs was easier. There
are some tools like mergify that provide these capabilities but they require
permissions and the ASF doesn't tend to allow such add-ons for our repos.
I use the GitHub Desktop app on my laptop and it supports cherry picks but
it is really just providing a UI to make local git changes easier.
> Upgrade BouncyCastle to 1.85 due to security issues
> ---------------------------------------------------
>
> Key: HADOOP-19942
> URL: https://issues.apache.org/jira/browse/HADOOP-19942
> Project: Hadoop Common
> Issue Type: Task
> Components: build
> Affects Versions: 3.5.0, 3.4.3, 3.6.0
> Reporter: PJ Fanning
> Assignee: PJ Fanning
> Priority: Major
> Labels: pull-request-available
> Fix For: 3.4.4, 3.5.1, 3.6.0
>
>
> [https://github.com/bcgit/bc-java/issues/2355]
> No release notes yet because they seem to be embargoed but the BC team do
> indicate that CVEs are coming.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
