You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@hive.apache.org by "Sankar Hariappan (Jira)" <ji...@apache.org> on 2021/12/23 05:19:00 UTC

[jira] [Resolved] (HIVE-25825) upgrade log4j 2.16.0 to 2.17.0+ due to CVE-2021-45105

     [ https://issues.apache.org/jira/browse/HIVE-25825?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sankar Hariappan resolved HIVE-25825.
-------------------------------------
    Target Version/s: 4.0.0
          Resolution: Fixed

PR merged to master! 
Thanks [~renjianting001] for the patch!

> upgrade log4j 2.16.0 to 2.17.0+ due to CVE-2021-45105
> -----------------------------------------------------
>
>                 Key: HIVE-25825
>                 URL: https://issues.apache.org/jira/browse/HIVE-25825
>             Project: Hive
>          Issue Type: Bug
>          Components: Hive, Standalone Metastore
>            Reporter: 任建亭
>            Assignee: 任建亭
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 4.0.0
>
>         Attachments: HIVE-25825.patch
>
>          Time Spent: 40m
>  Remaining Estimate: 0h
>
> upgrade log4j 2.16.0 to 2.17.0+ due to CVE-2021-45105
> [CVE - CVE-2021-45105 (mitre.org)|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45105]：https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45105



--
This message was sent by Atlassian Jira
(v8.20.1#820001)