[GitHub] [hive] pkumarsinha commented on pull request #4053: HIVE-27027: Upgrade jettison to 1.5.3 to fix CVE-2022-40150

["pkumarsinha (via GitHub)" <gi...@apache.org>]

pkumarsinha commented on PR #4053:
URL: https://github.com/apache/hive/pull/4053#issuecomment-1434281448

   @sss9700  
    https://nvd.nist.gov/vuln/detail/CVE-2022-40150 Actually in this, it states that the issue is reproducible in version <=1.4.0. It also says that this is under re-analysis.
   
   Should it be https://nvd.nist.gov/vuln/detail/CVE-2022-45693. ? If so, can you change the commit message accordingly? 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: gitbox-unsubscribe@hive.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: gitbox-unsubscribe@hive.apache.org
For additional commands, e-mail: gitbox-help@hive.apache.org