Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-27845

Upgrade protobuf to 3.24.4 to fix CVEs

    XMLWordPrintableJSON

Details

    Description

      Current protobuf-java(3.21.3) has the following CVE

      Direct vulnerabilities:
      CVE-2022-3510
      CVE-2022-3509
      CVE-2022-3171

      Vulnerabilities from dependencies:
      CVE-2023-2976
      CVE-2020-8908

      Attachments

        Issue Links

          causes

          Bug - A problem which impairs or prevents the functions of the product. HIVE-28123 Add Generated Protobuf code for 3.24.4 Upgrade

          • Major - Major loss of function.
          • Closed
          fixes

          Wish - General wishlist item. HIVE-28269 Please have regular releases of hive and its docker image

          • Major - Major loss of function.
          • Open
          links to

          Web Link GitHub Pull Request #5065

          Web Link GitHub Pull Request #5082

          Activity

            People

              tanishqchugh tanishqchugh
              akshatm Akshat Mathur
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: