Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-24788

Backport HIVE-23338 to branch-3.1

Log workAgile BoardRank to TopRank to BottomBulk Copy AttachmentsBulk Move AttachmentsVotersWatch issueWatchersCreate sub-taskConvert to sub-taskMoveLinkCloneLabelsUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Task
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 3.1.3
    • None

    Description

      jackson has a whole bunch of CVEs open against 2.9.x, which makes working with HIVE in security aware environments quite difficult.

      This has been fixed in HIVE-23338 already, but since 4.0.0 hasn't been released yet (and is not on the horizon, as far as I can tell), this should be backported to branch-3.1.

      Attachments

        Issue Links

        relates to

        Sub-task - The sub-task of the issue HADOOP-16905 Update jackson-databind to 2.10.3 to relieve us from the endless CVE patches

        • Major - Major loss of function.
        • Resolved

        Sub-task - The sub-task of the issue HIVE-27210 Backport HIVE-23338: Bump jackson version to 2.10.0 in branch-3

        • Major - Major loss of function.
        • Resolved

        Improvement - An improvement or enhancement to an existing feature or task. HADOOP-16917 Update dependency in branch-3.1

        • Blocker - Blocks development and/or testing work, production could not run
        • Resolved

        Improvement - An improvement or enhancement to an existing feature or task. HIVE-23338 Bump jackson version to 2.10.0

        • Major - Major loss of function.
        • Closed
        links to

        Web Link GitHub Pull Request #1986

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            h-vetinari H. Vetinari Assign to me
            h-vetinari H. Vetinari
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

              Estimated:
              Original Estimate - Not Specified
              Not Specified
              Remaining:
              Remaining Estimate - 0h
              0h
              Logged:
              Time Spent - 1h 10m
              1h 10m

              Slack

                Issue deployment