[HADOOP-15804] upgrade to commons-compress 1.18

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.10.0, 3.0.4, 3.3.0, 3.1.2, 2.8.6, 3.2.1, 2.9.3
• Assignee: Akira Ajisaka
• Reporter: PJ Fanning
• Created: 29/Sep/18 23:47
• Updated: 02/Oct/19 17:13
• Resolved: 19/Oct/18 12:36

Description

https://github.com/apache/commons-compress/blob/master/RELEASE-NOTES.txt

Some CVEs have been fixed in recent releases (https://commons.apache.org/proper/commons-compress/security-reports.html)

https://mvnrepository.com/artifact/org.apache.hadoop/hadoop-common/3.1.1 depends on commons-compress 1.4.1

Issue Links

• relates to: HIVE-20659 Update commons-compress to 1.18 due to security issues
• relates to: HADOOP-16555 Update commons-compress to 1.19