[HIVE-26749] CVE Upgrades for 3.2.0 release

• Type: Sub-task
• Status: Open
• Priority: Blocker
• Resolution: Unresolved
• Affects Version/s: 3.1.3
• Labels: hive-3.2.0-must
• Target Version/s: 3.2.0
• Assignee: Aman Raj
• Reporter: Aman Raj
• Created: 17/Nov/22 06:53
• Updated: 02/Mar/23 09:54

Description

Creating subtask for upgrading vulnerabilities in the 3.2.0 release

Issue Links

• contains: HIVE-26300 Upgrade Jackson databind version to 2.12.6.1+ to avoid CVE-2020-36518
• contains: HIVE-26173 Upgrade derby to 10.14.2.0
• contains: HIVE-25920 Bump Xerce2 to 2.12.2
• contains: HIVE-26078 Upgrade gson to 2.8.9
• contains: HIVE-26080 Upgrade accumulo-core to 1.10.1
• contains: HIVE-26081 Upgrade ant to 1.10.9
• contains: HIVE-25098 [CVE-2020-13949] Upgrade thrift from 0.13.0 to 0.14.1
• contains: HIVE-25945 Upgrade H2 database version to 2.1.210