[
https://issues.apache.org/jira/browse/TEZ-4654?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18040983#comment-18040983
]
Raghav Aggarwal commented on TEZ-4654:
--------------------------------------
[~abstractdog] , I didn't get your question fully, but what I infer is
"{_}whether its ok for tez to drop commons-collections3.x{_}" .My reasoning to
that is: commons-collections-3.2.2 is EOL and its better to move to 4.x. IMO,
tez 0.10.5 -> 1.0.0 will be a major version release and changes like this can
be expected to achieve security compliance.
Before TEZ-4657,
{code:java}
tez-1.0.0-SNAPSHOT/lib/commons-collections-3.2.2.jar
tez-1.0.0-SNAPSHOT/lib/commons-collections4-4.4.jar {code}
After TEZ-4657,
{code:java}
tez-1.0.0-SNAPSHOT/lib/commons-collections4-4.4.jar {code}
"{_}as far as I can understand, collections4 in tez doesn't make the situation
described in HIVE-29326 any better or worse"{_} => Yes, hive has to fix this,
there is no tez change required for commons-collections3.x issue which is the
linked Jira here.
> Migrate from commons-lang2.x to commons-lang3.x
> -----------------------------------------------
>
> Key: TEZ-4654
> URL: https://issues.apache.org/jira/browse/TEZ-4654
> Project: Apache Tez
> Issue Type: Improvement
> Reporter: László Bodor
> Assignee: Raghav Aggarwal
> Priority: Major
> Time Spent: 50m
> Remaining Estimate: 0h
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)