You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@drill.apache.org by "Ayush Sharma (JIRA)" <ji...@apache.org> on 2019/06/04 12:37:00 UTC

[jira] [Created] (DRILL-7282) Apache Drill using Outdated Version of many Libraries

Ayush Sharma created DRILL-7282:
-----------------------------------

             Summary: Apache Drill using Outdated Version of many Libraries
                 Key: DRILL-7282
                 URL: https://issues.apache.org/jira/browse/DRILL-7282
             Project: Apache Drill
          Issue Type: Bug
    Affects Versions: 1.14.0
            Reporter: Ayush Sharma
             Fix For: 1.17.0


Apache Drill is using outdated version of libraries and should update to the latest versions to avoid security issues in future.

The below are the list of libraries which needs to be updated:

commons-compiler-2.7.6 - Latest Version 3.0.12 -Jan 2019 
commons-compress-1.4.1 - Latest Version 1.18 - Aug 2018
janino-2.7.6 - Latest Version 3.0.12 - Jan 2019
jersey-common-2.8 - Latest Version 2.28 - Jan 2019
jersey-container-servlet-core-2.8 - Latest Version 2.28 - Jan 2019
jersey-guava-2.8 - Latest Version 2.28 - Jan 2019
jersey-media-multipart-2.8 - Latest Version 2.28 - Jan 2019
jersey-mvc-2.8 - Latest Version 2.28 - Jan 2019
jersey-mvc-freemarker-2.8 - Latest Version 2.28 - Jan 2019
jersey-server-2.8 - Latest Version 2.28 - Jan 2019
jline-2.10 - Latest Version 3.0.0.M1 - May 2016
log4j-over-slf4j-1.7.6 - Latest Version 1.8.0-beta4 - Feb 2019
logback-classic-1.2.3 - Latest Version 1.3.0-alpha4 Feb 2018
logback-core-1.2.3 - Latest Version 1.3.0-alpha4 Feb 2018
mimepull-1.9.3 - Latest Version 1.9.11 - Jan 2019
protostuff-json-1.0.8 - Latest Version 1.1.3 - Nov 2017
reflections-0.9.10 - Latest Version 0.9.11 - Mar 2017

 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)