[ 
https://issues.apache.org/jira/browse/TEZ-4654?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18040983#comment-18040983
 ] 

Raghav Aggarwal commented on TEZ-4654:
--------------------------------------

[~abstractdog] , I didn't get your question fully, but what I infer is 
"{_}whether its ok for tez to drop commons-collections3.x{_}" .My reasoning to 
that is: commons-collections-3.2.2 is EOL and its better to move to 4.x. IMO, 
tez 0.10.5 -> 1.0.0 will be a major version release and changes like this can 
be expected to achieve security compliance.

Before TEZ-4657, 

 
{code:java}
tez-1.0.0-SNAPSHOT/lib/commons-collections-3.2.2.jar
tez-1.0.0-SNAPSHOT/lib/commons-collections4-4.4.jar {code}
After TEZ-4657,

 

 
{code:java}
tez-1.0.0-SNAPSHOT/lib/commons-collections4-4.4.jar {code}
 

"{_}as far as I can understand, collections4 in tez doesn't make the situation 
described in HIVE-29326 any better or worse"{_} => Yes, hive has to fix this, 
there is no tez change required for commons-collections3.x issue which is the 
linked Jira here.

> Migrate from commons-lang2.x to commons-lang3.x
> -----------------------------------------------
>
>                 Key: TEZ-4654
>                 URL: https://issues.apache.org/jira/browse/TEZ-4654
>             Project: Apache Tez
>          Issue Type: Improvement
>            Reporter: László Bodor
>            Assignee: Raghav Aggarwal
>            Priority: Major
>          Time Spent: 50m
>  Remaining Estimate: 0h
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to