[ 
https://issues.apache.org/jira/browse/PARQUET-2289?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17714092#comment-17714092
 ] 

ASF GitHub Bot commented on PARQUET-2289:
-----------------------------------------

steveloughran commented on PR #1075:
URL: https://github.com/apache/parquet-mr/pull/1075#issuecomment-1514688456

   aah, no worries. i just despair when people ask for things backported to 5+ 
year old releases because they don't want the hassle of upgrading their own 
installation, e.g 
[HADOOP-18600](https://issues.apache.org/jira/browse/HADOOP-18600). My PoV 
there is "you are free to fork your own versions of things and maintain them" 
-the maintenance being what is expected.
   
   Whoever doesn't upgrade also gets to maintain their CVE fix process, both 
from hadoop and all the dependencies, so I would use the latest hadoop 2.9.x 
release, as at least there we fix all the hadoop source fixes we can, even 
though transitive JAR updates are out of scope. A six year old release has 6 
years worth of security related JAR updates to worry about.




> Avoid using hasCapability
> -------------------------
>
>                 Key: PARQUET-2289
>                 URL: https://issues.apache.org/jira/browse/PARQUET-2289
>             Project: Parquet
>          Issue Type: Improvement
>          Components: parquet-mr
>    Affects Versions: 1.13.0
>            Reporter: Fokko Driesprong
>            Assignee: Fokko Driesprong
>            Priority: Major
>             Fix For: 1.14.0
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to