[
https://issues.apache.org/jira/browse/HIVE-26413?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
PJ Fanning updated HIVE-26413:
------------------------------
Description:
commons-configuration v1 is end of life and has some dependencies that are
insecure.
https://mvnrepository.com/artifact/commons-configuration/commons-configuration/1.10
Hive-exec 4.0.0-alpha1 has commons-configuration v1.19 dependency:
https://mvnrepository.com/artifact/org.apache.hive/hive-exec/4.0.0-alpha-1
commons-configuration2 is supported still and is worth uptaking if hive still
needs config support.
Hive may need commons-configuration v1 because of Apache Atlas.
was:
commons-configuration v1 is end of life and has some dependencies that are
insecure.
https://mvnrepository.com/artifact/commons-configuration/commons-configuration/1.10
Hive-exec 4.0.0-alpha1 has commons-configuration v1.19 dependency:
https://mvnrepository.com/artifact/org.apache.hive/hive-exec/4.0.0-alpha-1
commons-configuration2 is supported still and is worth uptaking if hive still
needs config support.
> remove dependency on commons-configuration 1.10
> ------------------------------------------------
>
> Key: HIVE-26413
> URL: https://issues.apache.org/jira/browse/HIVE-26413
> Project: Hive
> Issue Type: Improvement
> Reporter: PJ Fanning
> Priority: Major
>
> commons-configuration v1 is end of life and has some dependencies that are
> insecure.
> https://mvnrepository.com/artifact/commons-configuration/commons-configuration/1.10
> Hive-exec 4.0.0-alpha1 has commons-configuration v1.19 dependency:
> https://mvnrepository.com/artifact/org.apache.hive/hive-exec/4.0.0-alpha-1
> commons-configuration2 is supported still and is worth uptaking if hive still
> needs config support.
> Hive may need commons-configuration v1 because of Apache Atlas.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
