[
https://issues.apache.org/jira/browse/DRILL-8164?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17511238#comment-17511238
]
ASF GitHub Bot commented on DRILL-8164:
---------------------------------------
cgivre commented on a change in pull request #2493:
URL: https://github.com/apache/drill/pull/2493#discussion_r833234640
##########
File path:
metastore/rdbms-metastore/src/main/java/org/apache/drill/metastore/rdbms/RdbmsMetastore.java
##########
@@ -117,6 +117,8 @@ private HikariDataSource dataSource(DrillConfig config) {
private void initTables(DataSource dataSource) {
try (Connection connection = dataSource.getConnection()) {
JdbcConnection jdbcConnection = new JdbcConnection(connection);
+ // TODO Replace the following steps with new function once this issue is
resolved.
Review comment:
@luocooong Let's hold off on merging to see if they release a new
version. I'm actually not so sure that this is actually an issue. If you look
at the report, the CVE seems like it was derived from a bug list rather than a
vulnerability.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
> Upgrade metadata-extractor because of CVE-2022-24613
> ----------------------------------------------------
>
> Key: DRILL-8164
> URL: https://issues.apache.org/jira/browse/DRILL-8164
> Project: Apache Drill
> Issue Type: Task
> Affects Versions: 1.20.0
> Reporter: Cong Luo
> Assignee: Cong Luo
> Priority: Major
>
> Please note that the *metadata-extractor* is only used for format-image, so
> we should not define the version in the root *pom.xml* file.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
