[HUDI-1976] Upgrade hive, jackson, log4j, hadoop to remove vulnerability

• Type: Improvement
• Status: Closed
• Priority: Critical
• Resolution: Pending Closed
• Fix Version/s: 0.12.0
• Component/s: dependencies, hive
• Labels: pull-request-available
• Story Points: 1
• Epic Link: Improve dependencies
• Assignee: Sagar Sumit
• Reporter: Nishith Agarwal

Reviewers

Raymond Xu

• Created: 05/Jun/21 07:23
• Updated: 23/Jun/22 12:15
• Resolved: 23/Jun/22 12:15

Description

https://github.com/apache/hudi/issues/2827

https://github.com/apache/hudi/issues/2826

https://github.com/apache/hudi/issues/2824

https://github.com/apache/hudi/issues/2823

Issue Links

• incorporates: HUDI-195 Bump jackson-databind to prevent deserialization loophole
• Is contained by: HUDI-2955 Upgrade Hadoop to 3.3.x
• links to: GitHub Pull Request #3071