[ 
https://issues.apache.org/jira/browse/HIVE-21737?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17087710#comment-17087710
 ] 

Ismaël Mejía commented on HIVE-21737:
-------------------------------------

[~kgyrtkirk] I have been struggling for months as you can see in this ticket to 
get this into Hive (and hopefully backported). Avro 1.9.x series fixed multiple 
issues including other security issues related to jackson, and it has started 
to be catch up by the rest of the Big Data ecosystem. So any help you can give 
me to get this in for Hive would be strongly appreciated.

Do you have a link to the concrete issue they don't want to cooperate on? In 
the meantime what if we just update the Spark version in Hive's fork. I have 
the impression if we upgrade into the Spark 2.4.x the tests will pass (because 
what is breaking today is an issue with a method that exists on Avro 1.8.x but 
not in Avro 1.7.x). Spark 2.3 depended on Avro 1.7.x, but starting with Spark 
2.4 they moved up into Avro 1.8.x Do you think we can do this?

 

> Upgrade Avro to version 1.9.2
> -----------------------------
>
>                 Key: HIVE-21737
>                 URL: https://issues.apache.org/jira/browse/HIVE-21737
>             Project: Hive
>          Issue Type: Improvement
>          Components: Hive
>            Reporter: Ismaël Mejía
>            Assignee: Fokko Driesprong
>            Priority: Major
>              Labels: pull-request-available
>         Attachments: 0001-HIVE-21737-Bump-Apache-Avro-to-1.9.2.patch
>
>          Time Spent: 1h
>  Remaining Estimate: 0h
>
> Avro 1.9.2 was released recently. It brings a lot of fixes including a leaner 
> version of Avro without Jackson in the public API. Worth the update.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to