[ 
https://issues.apache.org/jira/browse/HIVE-29246?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Raghav Aggarwal updated HIVE-29246:
-----------------------------------
    Description: 
As hive master branch is on JDK 21, upgrade of derby to 10.17.1.0 is possible 
[https://db.apache.org/derby/derby_downloads.html]

This will help with CVE's as well 
[CVE-2022-46337|https://www.cve.org/CVERecord?id=CVE-2022-46337] 

[https://mvnrepository.com/artifact/org.apache.derby/derby/10.14.2.0]

 

Derby change has done refactoring:
1. org.apache.derby.jdbc.EmbeddedDriver is part of _derbytools_ jar
2. org.apache.derby.security.SystemPermission => 
org.apache.derby.shared.common.security.SystemPermission (this is part of 
_derbyshared_ jar which is compile time dependency for 
{_}org.apache.derby:derby{_})
 

  was:
As hive master branch is on JDK 21, upgrade of derby to 10.17.1.0 is possible 
[https://db.apache.org/derby/derby_downloads.html]

 

This will help with CVE's as well 
[CVE-2022-46337|https://www.cve.org/CVERecord?id=CVE-2022-46337] 

[https://mvnrepository.com/artifact/org.apache.derby/derby/10.14.2.0]


> Upgrade derby version to 10.17.1.0
> ----------------------------------
>
>                 Key: HIVE-29246
>                 URL: https://issues.apache.org/jira/browse/HIVE-29246
>             Project: Hive
>          Issue Type: Improvement
>            Reporter: Raghav Aggarwal
>            Assignee: Raghav Aggarwal
>            Priority: Major
>
> As hive master branch is on JDK 21, upgrade of derby to 10.17.1.0 is possible 
> [https://db.apache.org/derby/derby_downloads.html]
> This will help with CVE's as well 
> [CVE-2022-46337|https://www.cve.org/CVERecord?id=CVE-2022-46337] 
> [https://mvnrepository.com/artifact/org.apache.derby/derby/10.14.2.0]
>  
> Derby change has done refactoring:
> 1. org.apache.derby.jdbc.EmbeddedDriver is part of _derbytools_ jar
> 2. org.apache.derby.security.SystemPermission => 
> org.apache.derby.shared.common.security.SystemPermission (this is part of 
> _derbyshared_ jar which is compile time dependency for 
> {_}org.apache.derby:derby{_})
>  



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to