[ 
https://issues.apache.org/jira/browse/HIVE-27104?focusedWorklogId=848567&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-848567
 ]

ASF GitHub Bot logged work on HIVE-27104:
-----------------------------------------

                Author: ASF GitHub Bot
            Created on: 02/Mar/23 08:29
            Start Date: 02/Mar/23 08:29
    Worklog Time Spent: 10m 
      Work Description: pkumarsinha commented on code in PR #4078:
URL: https://github.com/apache/hive/pull/4078#discussion_r1122746609


##########
pom.xml:
##########
@@ -883,7 +883,12 @@
       <dependency>
         <groupId>org.bouncycastle</groupId>
         <artifactId>bcprov-jdk15on</artifactId>
-        <version>${bcprov-jdk15on.version}</version>
+        <version>${bouncycastle.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.bouncycastle</groupId>

Review Comment:
   Why is this needed to be explicitly added as dependency? Is this not shipped 
as a part of bcprov-jdk15on? Wondering how was it working with 1.64





Issue Time Tracking
-------------------

    Worklog Id:     (was: 848567)
    Time Spent: 50m  (was: 40m)

> Upgrade Bouncy Castle to 1.68 due to high CVEs
> ----------------------------------------------
>
>                 Key: HIVE-27104
>                 URL: https://issues.apache.org/jira/browse/HIVE-27104
>             Project: Hive
>          Issue Type: Task
>            Reporter: Indhumathi Muthumurugesh
>            Priority: Major
>              Labels: pull-request-available
>          Time Spent: 50m
>  Remaining Estimate: 0h
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to