You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@drill.apache.org by "Laurent Goujon (Jira)" <ji...@apache.org> on 2021/05/27 23:53:00 UTC

[jira] [Resolved] (DRILL-7936) Remove Guava Files#createTempDir usage

     [ https://issues.apache.org/jira/browse/DRILL-7936?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Laurent Goujon resolved DRILL-7936.
-----------------------------------
    Fix Version/s: 1.19.0
         Reviewer: Charles Givre
       Resolution: Fixed

> Remove Guava Files#createTempDir usage
> --------------------------------------
>
>                 Key: DRILL-7936
>                 URL: https://issues.apache.org/jira/browse/DRILL-7936
>             Project: Apache Drill
>          Issue Type: Bug
>            Reporter: Laurent Goujon
>            Assignee: Laurent Goujon
>            Priority: Major
>             Fix For: 1.19.0
>
>
> According to CVE-2020-8908, method Files#createTempDir has some security issues, and usage has been deprecated in Guava 30.0.
> Usage of this function in Drill should be replaced with the native Java version as recommended by the Guava team.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)