Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[SPARK-28713][BUILD][2.4] Bump checkstyle from 8.2 to 8.23 #25437

Closed
wants to merge 2 commits into from
Closed

[SPARK-28713][BUILD][2.4] Bump checkstyle from 8.2 to 8.23 #25437

wants to merge 2 commits into from

Commits on Aug 13, 2019

  1. [SPARK-28713][BUILD] Bump checkstyle from 8.14 to 8.23 

    Fixes a vulnerability from the GitHub Security Advisory Database:

_Moderate severity vulnerability that affects com.puppycrawl.tools:checkstyle_
Checkstyle prior to 8.18 loads external DTDs by default, which can potentially lead to denial of service attacks or the leaking of confidential information.

checkstyle/checkstyle#6474

Affected versions: < 8.18

Ran checkstyle locally.

Closes apache#25432 from Fokko/SPARK-28713.

Authored-by: Fokko Driesprong <fokko@apache.org>
Signed-off-by: Dongjoon Hyun <dhyun@apple.com>
(cherry picked from commit d8dd571)
    @Fokko
    Fokko committed Aug 13, 2019
    Configuration menu
    Copy the full SHA
    6206c31 View commit details
    Browse the repository at this point in the history

  2. Bump maven-checkstyle-plugin from 2.17 to 3.0.0

    @Fokko
    Fokko committed Aug 13, 2019
    Configuration menu
    Copy the full SHA
    3247fd7 View commit details
    Browse the repository at this point in the history