Uploaded image for project: 'Apache Drill'
  1. Apache Drill
  2. DRILL-7936

Remove Guava Files#createTempDir usage

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.19.0
    • Component/s: None
    • Labels:
      None

      Description

      According to CVE-2020-8908, method Files#createTempDir has some security issues, and usage has been deprecated in Guava 30.0.

      Usage of this function in Drill should be replaced with the native Java version as recommended by the Guava team.

        Attachments

          Activity

            People

            • Assignee:
              laurent Laurent Goujon
              Reporter:
              laurent Laurent Goujon
              Reviewer:
              Charles Givre
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: