Details
-
Bug
-
Status: Open
-
Major
-
Resolution: Unresolved
-
1.14.0
-
None
-
None
-
None
Description
Apache Drill is using outdated version of libraries and should update to the latest versions to avoid security issues in future.
The below are the list of libraries which needs to be updated:
commons-compiler-2.7.6 - Latest Version 3.0.12 -Jan 2019
commons-compress-1.4.1 - Latest Version 1.18 - Aug 2018
janino-2.7.6 - Latest Version 3.0.12 - Jan 2019
jersey-common-2.8 - Latest Version 2.28 - Jan 2019
jersey-container-servlet-core-2.8 - Latest Version 2.28 - Jan 2019
jersey-guava-2.8 - Latest Version 2.28 - Jan 2019
jersey-media-multipart-2.8 - Latest Version 2.28 - Jan 2019
jersey-mvc-2.8 - Latest Version 2.28 - Jan 2019
jersey-mvc-freemarker-2.8 - Latest Version 2.28 - Jan 2019
jersey-server-2.8 - Latest Version 2.28 - Jan 2019
jline-2.10 - Latest Version 3.0.0.M1 - May 2016
log4j-over-slf4j-1.7.6 - Latest Version 1.8.0-beta4 - Feb 2019
logback-classic-1.2.3 - Latest Version 1.3.0-alpha4 Feb 2018
logback-core-1.2.3 - Latest Version 1.3.0-alpha4 Feb 2018
mimepull-1.9.3 - Latest Version 1.9.11 - Jan 2019
protostuff-json-1.0.8 - Latest Version 1.1.3 - Nov 2017
reflections-0.9.10 - Latest Version 0.9.11 - Mar 2017