You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@drill.apache.org by "Arina Ielchiieva (Jira)" <ji...@apache.org> on 2019/11/04 12:48:00 UTC
[jira] [Updated] (DRILL-7282) Apache Drill using Outdated Version
of many Libraries
[ https://issues.apache.org/jira/browse/DRILL-7282?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Arina Ielchiieva updated DRILL-7282:
------------------------------------
Fix Version/s: (was: 1.17.0)
> Apache Drill using Outdated Version of many Libraries
> -----------------------------------------------------
>
> Key: DRILL-7282
> URL: https://issues.apache.org/jira/browse/DRILL-7282
> Project: Apache Drill
> Issue Type: Bug
> Affects Versions: 1.14.0
> Reporter: Ayush Sharma
> Priority: Major
>
> Apache Drill is using outdated version of libraries and should update to the latest versions to avoid security issues in future.
> The below are the list of libraries which needs to be updated:
> commons-compiler-2.7.6 - Latest Version 3.0.12 -Jan 2019
> commons-compress-1.4.1 - Latest Version 1.18 - Aug 2018
> janino-2.7.6 - Latest Version 3.0.12 - Jan 2019
> jersey-common-2.8 - Latest Version 2.28 - Jan 2019
> jersey-container-servlet-core-2.8 - Latest Version 2.28 - Jan 2019
> jersey-guava-2.8 - Latest Version 2.28 - Jan 2019
> jersey-media-multipart-2.8 - Latest Version 2.28 - Jan 2019
> jersey-mvc-2.8 - Latest Version 2.28 - Jan 2019
> jersey-mvc-freemarker-2.8 - Latest Version 2.28 - Jan 2019
> jersey-server-2.8 - Latest Version 2.28 - Jan 2019
> jline-2.10 - Latest Version 3.0.0.M1 - May 2016
> log4j-over-slf4j-1.7.6 - Latest Version 1.8.0-beta4 - Feb 2019
> logback-classic-1.2.3 - Latest Version 1.3.0-alpha4 Feb 2018
> logback-core-1.2.3 - Latest Version 1.3.0-alpha4 Feb 2018
> mimepull-1.9.3 - Latest Version 1.9.11 - Jan 2019
> protostuff-json-1.0.8 - Latest Version 1.1.3 - Nov 2017
> reflections-0.9.10 - Latest Version 0.9.11 - Mar 2017
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)