tanishq-chugh opened a new pull request, #5082:
URL: https://github.com/apache/hive/pull/5082

   What changes were proposed in this pull request?
   In order to resolve the CVEs caused by 3.21.7 version of protobuf-java, we 
are trying to upgrade it to 3.24.4 version.
   
   Why are the changes needed?
   We need to update the protobuf-java version in hive's pom.xml to resolve the 
CVEs.
   
   Does this PR introduce any user-facing change?
   No
   
   Is the change a dependency upgrade?
   Yes
   
   How was this patch tested?
   Manual tests.
   After updating the protobuf-java version, we build the hive project again.
   After manually testeing some DDL and SQL commands, hive is working as 
expected. 
   Also, the merge might not reflect any changes in generated protobuf code, as 
both the versions generated exactly the same code.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to