Laszlo Gaal created IMPALA-15712:
------------------------------------

             Summary: Frontend dependency cleanup
                 Key: IMPALA-15712
                 URL: https://issues.apache.org/jira/browse/IMPALA-15712
             Project: IMPALA
          Issue Type: Dependency upgrade
            Reporter: Laszlo Gaal
            Assignee: Laszlo Gaal


Recent code audits showed that a Brotli codec component was included in the 
frontend indirectly via the path hive-common - orc-core - brotli4j.
Since Impala does not support Brotli compression either for reading or writing, 
this component is unnecessary. In the light of the recent CVEs the simplest 
solution is to exclude the component from the FE build.



--
This message was sent by Atlassian Jira
(v10.3.26#10030026)

Reply via email to