You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@oozie.apache.org by "Dénes Bodó (Jira)" <ji...@apache.org> on 2022/02/22 09:10:00 UTC

[jira] [Commented] (OOZIE-3656) upgrade velocity to latest velocity2 due to cve

    [ https://issues.apache.org/jira/browse/OOZIE-3656?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17495968#comment-17495968 ] 

Dénes Bodó commented on OOZIE-3656:
-----------------------------------

As I see velocity is only used by hive(-exec) thus there is no more we can do in Oozie. However, we could upgrade Hive. And Hadoop too.

> upgrade velocity to latest velocity2 due to cve
> -----------------------------------------------
>
>                 Key: OOZIE-3656
>                 URL: https://issues.apache.org/jira/browse/OOZIE-3656
>             Project: Oozie
>          Issue Type: Improvement
>            Reporter: PJ Fanning
>            Priority: Major
>
> https://github.com/advisories/GHSA-59j4-wjwp-mw9m



--
This message was sent by Atlassian Jira
(v8.20.1#820001)