[HIVE-14455] upgrade httpclient, httpcore to match updated hadoop dependency

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0
• Target Version/s: 2.1.2, 3.0.0
• Assignee: Thejas Nair
• Reporter: Thejas Nair
• Created: 06/Aug/16 21:48
• Updated: 21/May/19 12:39
• Resolved: 29/Mar/17 17:02

Description

Hive was having a newer version of httpclient and httpcore since 1.2.0 (HIVE-9709), when compared to Hadoop 2.x versions, to be able to make use of newer apis in httpclient 4.4.
There was security issue in the older version of httpclient and httpcore that hadoop was using, and as a result moved to httpclient 4.5.2 and httpcore 4.4.4 (HADOOP-12767).
As hadoop was using the older version of these libraries and they often end up earlier in the classpath, we have had bunch of difficulties in different environments with class/method not found errors.

Now, that hadoops dependencies in versions with security fix are newer and have the API that hive needs, we can be on the same version. For older versions of hadoop this version update doesn't matter as the difference is already there.

Issue Links

• is duplicated by: HIVE-21374 Dependency conflicts on org.apache.httpcomponents:httpcore:jar, leading to invoking unexpected methods
• is related to: HADOOP-12767 update apache httpclient version to 4.5.2; httpcore to 4.4.4
• is related to: HIVE-9709 Hive should support replaying cookie from JDBC driver for beeline