PJ Fanning created HIVE-26413:
---------------------------------

             Summary: remove dependency on commons-configuration 1.10 
                 Key: HIVE-26413
                 URL: https://issues.apache.org/jira/browse/HIVE-26413
             Project: Hive
          Issue Type: Improvement
            Reporter: PJ Fanning


commons-configuration v1 is end of life and has some dependencies that are 
insecure.
https://mvnrepository.com/artifact/commons-configuration/commons-configuration/1.10

Hive-exec 4.0.0-alpha1 has commons-configuration v1.19 dependency: 
https://mvnrepository.com/artifact/org.apache.hive/hive-exec/4.0.0-alpha-1

commons-configuration2 is supported still and is worth uptaking if hive still 
needs config support. 



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to