You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@hive.apache.org by ng...@apache.org on 2022/01/10 19:06:57 UTC

[hive] branch master updated: HIVE-25726: Upgrade velocity to 2.3 due to CVE-2020-13936 (Sourabh Goyal via Naveen Gangam)

This is an automated email from the ASF dual-hosted git repository.

ngangam pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/hive.git


The following commit(s) were added to refs/heads/master by this push:
     new e50fa56  HIVE-25726: Upgrade velocity to 2.3 due to CVE-2020-13936 (Sourabh Goyal via Naveen Gangam)
e50fa56 is described below

commit e50fa5662bbefd8e9e192bd4f109709aeff548e5
Author: Sourabh Goyal <so...@cloudera.com>
AuthorDate: Fri Nov 19 03:19:25 2021 -0800

    HIVE-25726: Upgrade velocity to 2.3 due to CVE-2020-13936 (Sourabh Goyal via Naveen Gangam)
    
    Change-Id: I067ed469a981a8c23c5e51ad1625dab260f6d5d0
---
 pom.xml                 |  4 ++--
 vector-code-gen/pom.xml | 10 ----------
 2 files changed, 2 insertions(+), 12 deletions(-)

diff --git a/pom.xml b/pom.xml
index 2f1b38b..9aeaaf6 100644
--- a/pom.xml
+++ b/pom.xml
@@ -209,7 +209,7 @@
     <tempus-fugit.version>1.1</tempus-fugit.version>
     <snappy.version>1.1.4</snappy.version>
     <wadl-resourcedoc-doclet.version>1.4</wadl-resourcedoc-doclet.version>
-    <velocity.version>1.5</velocity.version>
+    <velocity.version>2.3</velocity.version>
     <xerces.version>2.12.1</xerces.version>
     <xmlsec.version>2.3.0</xmlsec.version>
     <zookeeper.version>3.5.5</zookeeper.version>
@@ -596,7 +596,7 @@
       </dependency>
       <dependency>
         <groupId>org.apache.velocity</groupId>
-        <artifactId>velocity</artifactId>
+        <artifactId>velocity-engine-core</artifactId>
         <version>${velocity.version}</version>
       </dependency>
       <dependency>
diff --git a/vector-code-gen/pom.xml b/vector-code-gen/pom.xml
index aeb31fa..4f38cae 100644
--- a/vector-code-gen/pom.xml
+++ b/vector-code-gen/pom.xml
@@ -43,16 +43,6 @@
       <artifactId>ant</artifactId>
       <version>${ant.version}</version>
     </dependency>
-    <dependency>
-      <groupId>org.apache.velocity</groupId>
-      <artifactId>velocity</artifactId>
-           <exclusions>
-             <exclusion>
-            <groupId>commons-collections</groupId>
-            <artifactId>commons-collections</artifactId>
-          </exclusion>
-           </exclusions>
-    </dependency>
   </dependencies>
 
   <build>