[
https://issues.apache.org/jira/browse/HIVE-22374?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16960428#comment-16960428
]
Hive QA commented on HIVE-22374:
--------------------------------
Here are the results of testing the latest attachment:
https://issues.apache.org/jira/secure/attachment/12984122/HIVE-22374.2.patch
{color:red}ERROR:{color} -1 due to build exiting with an error
Test results:
https://builds.apache.org/job/PreCommit-HIVE-Build/19168/testReport
Console output: https://builds.apache.org/job/PreCommit-HIVE-Build/19168/console
Test logs: http://104.198.109.242/logs/PreCommit-HIVE-Build-19168/
Messages:
{noformat}
Executing org.apache.hive.ptest.execution.TestCheckPhase
Tests exited with: Exception: Patch URL
https://issues.apache.org/jira/secure/attachment/12984122/HIVE-22374.2.patch
was found in seen patch url's cache and a test was probably run already on it.
Aborting...
{noformat}
This message is automatically generated.
ATTACHMENT ID: 12984122 - PreCommit-HIVE-Build
> Upgrade commons-compress version to 1.19
> ----------------------------------------
>
> Key: HIVE-22374
> URL: https://issues.apache.org/jira/browse/HIVE-22374
> Project: Hive
> Issue Type: Bug
> Components: Hive
> Reporter: Sumin Byeon
> Assignee: Sumin Byeon
> Priority: Critical
> Attachments: HIVE-22374.1.patch, HIVE-22374.2.patch
>
>
> As described in
> [CVE-2019-12402|https://nvd.nist.gov/vuln/detail/CVE-2019-12402],
> {{commons-compress:1.18}} has an issue where certain inputs may cause an
> infinite loop which leads to a denial of service attack.
> This patch simply upgrades {{common-compress}} versions from 1.18 to 1.19
> which is the latest minor version at the date of filing this issue ([Maven
> repo|https://mvnrepository.com/artifact/org.apache.commons/commons-compress]).
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
