bhupeshdhiman84 opened a new pull request #32398: URL: https://github.com/apache/spark/pull/32398
Hi All, This is my first time here, I have upgraded the hive version from 2.3.7 to 2.3.8 ### What changes were proposed in this pull request? I have upgraded the hive version from 2.3.7 to 2.3.8 ### Why are the changes needed? Following is the open Jira ticket https://issues.apache.org/jira/browse/SPARK-34458 Apache hive version 2.3.7 used by spark-hive (version 3.0.1) has the following CVEs, as reported by our security team. CVE-2017-12625, CVE-2015-1772, CVE-2016-3083, CVE-2018-11777, CVE-2014-0228 Please upgrade apache hive libraries to a higher version with no known security risks. ### Does this PR introduce _any_ user-facing change? Not sure. This will allow user to use 2.3.8 hive version with security patch ### How was this patch tested? I have done a new clean build. Please let me know, if I need to do any additional test on it. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
