[HIVE-27012] Remove JavaEWAH dependency from HIVE to fix CVEs.

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 4.0.0-beta-1
• Labels: pull-request-available
• Assignee: Devaspati Krishnatri
• Reporter: Devaspati Krishnatri
• Created: 02/Feb/23 06:46
• Updated: 15/Aug/23 06:33
• Resolved: 02/Mar/23 07:24

Description

Upgrade JavaEWAH to 1.1.7

JavaEWAH:0.3.2 is pulling in CVE-2022-29580.

CVE-2022-29580 is a High Severity CVE with CVSSv3 Score 7.8

Issue Links

• links to: GitHub Pull Request #4010