hive-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Karen Coppage (Jira)" <j...@apache.org>
Subject [jira] [Updated] (HIVE-23344) Remove org.scala-lang:scala-compiler 2.11.0 transitive dependency
Date Sun, 03 May 2020 11:24:00 GMT

     [ https://issues.apache.org/jira/browse/HIVE-23344?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Karen Coppage updated HIVE-23344:
---------------------------------
    Attachment: HIVE-23344.01.patch
        Status: Patch Available  (was: Open)

> Remove org.scala-lang:scala-compiler 2.11.0 transitive dependency
> -----------------------------------------------------------------
>
>                 Key: HIVE-23344
>                 URL: https://issues.apache.org/jira/browse/HIVE-23344
>             Project: Hive
>          Issue Type: Improvement
>            Reporter: Karen Coppage
>            Assignee: Karen Coppage
>            Priority: Major
>         Attachments: HIVE-23344.01.patch, HIVE-23344.01.patch
>
>
> Lots of 
> org.scala-lang:scala-compiler:jar:2.11.0:compile -> org.scala-lang:scalap:jar:2.11.0:compile
-> org.json4s:json4s-core_2.11:jar:3.2.11:compile -> org.json4s:json4s-jackson_2.11:jar:3.2.11:compile
-> org.apache.spark:spark-core_2.11:jar:2.3.0:compile
> Where scala-compiler 2.11.0 is a security vulnerability.
> Excluding org.json4s:json4s-jackson_2.11:jar:3.2.11 from spark-core_2 dependencies.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Mime
View raw message