zhouyifan279 opened a new pull request, #38978: URL: https://github.com/apache/spark/pull/38978
### What changes were proposed in this pull request? Remove hive-vector-code-gen and its dependent jars from spark distribution ### Why are the changes needed? hive-vector-code-gen is not used in spark but introduced org.apache.velocity:velocity:velocity-1.5.jar, which has been reported with vulnerability CVE-2020-13936. ### Does this PR introduce _any_ user-facing change? No ### How was this patch tested? Passed current test cases -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
