[
https://issues.apache.org/jira/browse/HADOOP-18484?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17614821#comment-17614821
]
ASF GitHub Bot commented on HADOOP-18484:
-----------------------------------------
pjfanning commented on PR #4991:
URL: https://github.com/apache/hadoop/pull/4991#issuecomment-1272638099
It seems that you can download jdk8 friendly jars from
* http://www.hsqldb.org/download/hsqldb_270/
* https://repo1.maven.org/maven2/org/hsqldb/hsqldb/2.7.0/
I'm not a maven expert but I think you might be able to specify a
'classifier' - in this case, possibly 'jdk8' in order to have maven download
hsqldb-2.7.0-jdk8.jar.
Presumably v2.7.1.jar will be similar (whenever it gets published).
> upgrade hsqldb to v2.7.1 due to CVE
> -----------------------------------
>
> Key: HADOOP-18484
> URL: https://issues.apache.org/jira/browse/HADOOP-18484
> Project: Hadoop Common
> Issue Type: Improvement
> Reporter: PJ Fanning
> Priority: Major
> Labels: pull-request-available
>
> https://github.com/advisories/GHSA-77xx-rxvh-q682
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
