You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@hive.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2022/11/27 00:23:00 UTC

[jira] [Work logged] (HIVE-26568) Upgrade Log4j2 to 2.18.0 due to CVEs

     [ https://issues.apache.org/jira/browse/HIVE-26568?focusedWorklogId=829104&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-829104 ]

ASF GitHub Bot logged work on HIVE-26568:
-----------------------------------------

                Author: ASF GitHub Bot
            Created on: 27/Nov/22 00:22
            Start Date: 27/Nov/22 00:22
    Worklog Time Spent: 10m 
      Work Description: github-actions[bot] commented on PR #3623:
URL: https://github.com/apache/hive/pull/3623#issuecomment-1328139628

   This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.
   Feel free to reach out on the dev@hive.apache.org list if the patch is in need of reviews.




Issue Time Tracking
-------------------

    Worklog Id:     (was: 829104)
    Time Spent: 0.5h  (was: 20m)

> Upgrade Log4j2 to 2.18.0 due to CVEs
> ------------------------------------
>
>                 Key: HIVE-26568
>                 URL: https://issues.apache.org/jira/browse/HIVE-26568
>             Project: Hive
>          Issue Type: Bug
>    Affects Versions: 3.1.2
>            Reporter: Naveen Gangam
>            Assignee: Naveen Gangam
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 4.0.0-alpha-2
>
>          Time Spent: 0.5h
>  Remaining Estimate: 0h
>
> High security vulnerability in Log4J - CVE-2021-44832 bundled with Hive



--
This message was sent by Atlassian Jira
(v8.20.10#820010)