You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@hive.apache.org by "PJ Fanning (Jira)" <ji...@apache.org> on 2022/07/20 01:57:00 UTC

[jira] [Created] (HIVE-26413) remove dependency on commons-configuration 1.10

PJ Fanning created HIVE-26413:
---------------------------------

             Summary: remove dependency on commons-configuration 1.10 
                 Key: HIVE-26413
                 URL: https://issues.apache.org/jira/browse/HIVE-26413
             Project: Hive
          Issue Type: Improvement
            Reporter: PJ Fanning


commons-configuration v1 is end of life and has some dependencies that are insecure.
https://mvnrepository.com/artifact/commons-configuration/commons-configuration/1.10

Hive-exec 4.0.0-alpha1 has commons-configuration v1.19 dependency: 
https://mvnrepository.com/artifact/org.apache.hive/hive-exec/4.0.0-alpha-1

commons-configuration2 is supported still and is worth uptaking if hive still needs config support. 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)