[HIVE-24299] hive-ql guava versions and vulnerabilities

• Type: Improvement
• Status: Open
• Priority: Blocker
• Resolution: Unresolved
• Affects Version/s: 3.1.2
• Component/s: hpl/sql
• Labels: pull-request-available
• Assignee: Unassigned
• Reporter: openlookeng
• Created: 22/Oct/20 12:26
• Updated: 23/Sep/22 13:36

Description

hive-ql shades google's guava 19.0 component, but have vulnerabilities CVE-2018-10237, do team have plan to update it ?

Issue Links

• links to: GitHub Pull Request #3616