[
https://issues.apache.org/jira/browse/HADOOP-15261?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
PandaMonkey updated HADOOP-15261:
---------------------------------
Description:
Hi, after analyzing hadoop-common-project\hadoop-minikdc\pom.xml, we found that
Hadoop depends on org.apache.kerby:kerb-simplekdc 1.0.1, which transitivity
introduced commons-io:2.5.
At the same time, hadoop directly depends on a older version of commons-io:2.4.
By further look into the source code, these two versions of commons-io have
many different features. The dependency conflict problem brings high risks of
"NotClassDefFoundError:" or "NoSuchMethodError" issues at runtime. Please
notice this problem. Maybe upgrading commons-io from 2.4 to 2.5 is a good
choice. Hope this report can help you. Thanks!
was:
Hi, after analyzing hadoop-common-project\hadoop-minikdc\pom.xml, we found that
Hadoop depends on org.apache.kerby:kerb-simplekdc 1.0.1, which transitivity
introduced commons-io:2.5.
At the same time, Spark-core directly depends on a older version of
commons-io:2.4. By further look into the source code, these two versions of
commons-io have many different features. The dependency conflict problem brings
high risks of "NotClassDefFoundError:" or "NoSuchMethodError" issues at
runtime. Please notice this problem. Maybe upgrading commons-io from 2.4 to 2.5
is a good choice. Hope this report can help you. Thanks!
> Upgrade commons-io from 2.4 to 2.5
> ----------------------------------
>
> Key: HADOOP-15261
> URL: https://issues.apache.org/jira/browse/HADOOP-15261
> Project: Hadoop Common
> Issue Type: Bug
> Components: minikdc
> Affects Versions: 3.0.0-alpha3
> Reporter: PandaMonkey
> Priority: Major
> Attachments: hadoop.txt
>
>
> Hi, after analyzing hadoop-common-project\hadoop-minikdc\pom.xml, we found
> that Hadoop depends on org.apache.kerby:kerb-simplekdc 1.0.1, which
> transitivity introduced commons-io:2.5.
> At the same time, hadoop directly depends on a older version of
> commons-io:2.4. By further look into the source code, these two versions of
> commons-io have many different features. The dependency conflict problem
> brings high risks of "NotClassDefFoundError:" or "NoSuchMethodError" issues
> at runtime. Please notice this problem. Maybe upgrading commons-io from 2.4
> to 2.5 is a good choice. Hope this report can help you. Thanks!
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
