[GitHub] [hive] TuroczyX commented on pull request #4271: HIVE-27299: Upgrade guava version to 31.1-jre to fix CVE

["TuroczyX (via GitHub)" <gi...@apache.org>]

TuroczyX commented on PR #4271:
URL: https://github.com/apache/hive/pull/4271#issuecomment-1525398100

   It is a fair change to fix the CVE's, but I have doubt it will be as easy as the change. The Guava 16 was released in 2014, the 31 is released somewhere in early 2023. After 9 years, I think there will be several breaking change that needs to adjust in the hive side. It should be a huge, but respectful task.
   
   cc: @abstractdog @ayushtkn @deniskuzZ 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: gitbox-unsubscribe@hive.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: gitbox-unsubscribe@hive.apache.org
For additional commands, e-mail: gitbox-help@hive.apache.org