[jira] (HUDI-1976) Upgrade hive, jackson, log4j, hadoop to remove vulnerability

["Raymond Xu (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HUDI-1976 ]


    Raymond Xu deleted comment on HUDI-1976:
    ----------------------------------

was (Author: githubbot):
n3nash commented on a change in pull request #3071:
URL: https://github.com/apache/hudi/pull/3071#discussion_r662042993



##########
File path: hudi-client/hudi-spark-client/pom.xml
##########
@@ -173,6 +183,18 @@
         <artifactId>awaitility</artifactId>
         <scope>test</scope>
     </dependency>
+
+    <dependency>
+      <groupId>org.codehaus.janino</groupId>
+      <artifactId>commons-compiler</artifactId>
+      <version>3.0.10</version>
+    </dependency>
+
+    <dependency>
+      <groupId>org.codehaus.janino</groupId>
+      <artifactId>janino</artifactId>
+      <version>3.0.10</version>

Review comment:
       Has something changed between 2.3.1 to 2.3.9 w.r.t these packages ? 




-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@hudi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


> Upgrade hive, jackson, log4j, hadoop to remove vulnerability
> ------------------------------------------------------------
>
>                 Key: HUDI-1976
>                 URL: https://issues.apache.org/jira/browse/HUDI-1976
>             Project: Apache Hudi
>          Issue Type: Task
>          Components: hive
>            Reporter: Nishith Agarwal
>            Assignee: Vinay
>            Priority: Critical
>              Labels: pull-request-available
>
> [https://github.com/apache/hudi/issues/2827]
> [https://github.com/apache/hudi/issues/2826]
> [https://github.com/apache/hudi/issues/2824|https://github.com/apache/hudi/issues/2826]
> [https://github.com/apache/hudi/issues/2823|https://github.com/apache/hudi/issues/2826]



--
This message was sent by Atlassian Jira
(v8.20.1#820001)