You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@hbase.apache.org by "Duo Zhang (JIRA)" <ji...@apache.org> on 2019/03/29 13:06:00 UTC

[jira] [Commented] (HBASE-22130) [hbase-thirdparty] Upgrade thirdparty dependencies

    [ https://issues.apache.org/jira/browse/HBASE-22130?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16804947#comment-16804947 ] 

Duo Zhang commented on HBASE-22130:
-----------------------------------

I think we can upgrade netty to the newest 4.1.x.

And do we need to upgrade protobuf? It seems that the newest version is 3.7.0 now.

> [hbase-thirdparty] Upgrade thirdparty dependencies
> --------------------------------------------------
>
>                 Key: HBASE-22130
>                 URL: https://issues.apache.org/jira/browse/HBASE-22130
>             Project: HBase
>          Issue Type: Task
>          Components: thirdparty
>            Reporter: Duo Zhang
>            Priority: Major
>
> First guava has a CVE so we need to upgrade to at least 26.0, better to the newest 27.1.
> And we can also upgrade the other dependencies to the newest version at the same time.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)