[ 
https://issues.apache.org/jira/browse/IMPALA-9108?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16964245#comment-16964245
 ] 

ASF subversion and git services commented on IMPALA-9108:
---------------------------------------------------------

Commit 28b1d53f9cb7581974dfc0b2dd75f2f015c1c6b9 in impala's branch 
refs/heads/master from Tim Armstrong
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=28b1d53 ]

IMPALA-9108: exclude leveldbjni mvn dependency

We don't need this at all - it's pulled in via
some transitive dependencies, e.g. htrace and
hive-serde.

Add an exclusion and add it as a banned dependency.

Change-Id: I90b63bc03511545530e1506bc602623591c56e98
Reviewed-on: http://gerrit.cloudera.org:8080/14593
Tested-by: Impala Public Jenkins <[email protected]>
Reviewed-by: Joe McDonnell <[email protected]>


> Unused leveldbjni dependency triggers some security scanners
> ------------------------------------------------------------
>
>                 Key: IMPALA-9108
>                 URL: https://issues.apache.org/jira/browse/IMPALA-9108
>             Project: IMPALA
>          Issue Type: Bug
>          Components: Infrastructure
>            Reporter: Tim Armstrong
>            Assignee: Tim Armstrong
>            Priority: Critical
>             Fix For: Impala 3.4.0
>
>
> A windows dll in leveldbjni-all-1.8.jar is flagged by some security scanners. 
> We shouldn't have a dependency on leveldb, so we should exclude this and not 
> pull in the jar.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to