[BIGTOP-3615] Upgrade log4j2 of Hive 3.1.2 to 2.16.0

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0.0
• Fix Version/s: 3.1.0, 3.0.1
• Component/s: hive
• Assignee: Masatake Iwasaki
• Reporter: Masatake Iwasaki
• Created: 14/Dec/21 11:07
• Updated: 10/Feb/22 06:06
• Resolved: 16/Dec/21 01:32

Description

HIVE-25795 upgraded log4j2 to 2.15.0 for CVE-2021-44228. We need the patch of HIVE-22278 too for Hive 3.1.2.

Issue Links

• is related to: HIVE-25795 [CVE-2021-44228] Update log4j2 version to 2.15.0
• is related to: HIVE-24500 Hive - upgrade log4j 2.12.1 to 2.13.2+ due to CVE-2020-9488
• is related to: HIVE-22278 Upgrade log4j to 2.12.1
• relates to: BIGTOP-3613 Review log4j configurations for CVE-2021-44228
• relates to: BIGTOP-3640 Upgrade hive's log4j2 version to 2.17.1 for Bigtop 3.0.x
• links to: GitHub pull request #841