[
https://issues.apache.org/jira/browse/HIVE-20659?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16649133#comment-16649133
]
Hive QA commented on HIVE-20659:
--------------------------------
Here are the results of testing the latest attachment:
https://issues.apache.org/jira/secure/attachment/12943573/HIVE-20659.1.patch
{color:red}ERROR:{color} -1 due to no test(s) being added or modified.
{color:green}SUCCESS:{color} +1 due to 15079 tests passed
Test results:
https://builds.apache.org/job/PreCommit-HIVE-Build/14417/testReport
Console output: https://builds.apache.org/job/PreCommit-HIVE-Build/14417/console
Test logs: http://104.198.109.242/logs/PreCommit-HIVE-Build-14417/
Messages:
{noformat}
Executing org.apache.hive.ptest.execution.TestCheckPhase
Executing org.apache.hive.ptest.execution.PrepPhase
Executing org.apache.hive.ptest.execution.YetusPhase
Executing org.apache.hive.ptest.execution.ExecutionPhase
Executing org.apache.hive.ptest.execution.ReportingPhase
{noformat}
This message is automatically generated.
ATTACHMENT ID: 12943573 - PreCommit-HIVE-Build
> Update commons-compress to 1.18 due to security issues
> ------------------------------------------------------
>
> Key: HIVE-20659
> URL: https://issues.apache.org/jira/browse/HIVE-20659
> Project: Hive
> Issue Type: Bug
> Components: Hive
> Affects Versions: 1.2.1, 3.0.0, 2.3.2, 3.1.0
> Reporter: Jörn Franke
> Assignee: Bharathkrishna Guruvayoor Murali
> Priority: Critical
> Attachments: HIVE-20659.1.patch
>
>
> Currently most Hive version depends on commons-compress 1.9 or 1.4. Those
> versions have several security issues:
> [https://commons.apache.org/proper/commons-compress/security-reports.html]
> I propose to upgrade all commons-compress dependencies in all Hive
> (sub-)projects to at least 1.18. This will also make it easier for future
> extensions to Hive (serde, udfs, etc.) that have dependencies to
> commons-compress (e.g. [https://github.com/zuinnote/hadoopoffice/wiki)] to
> integrate into Hive without upgrading the commons-compress library manually
> in the Hive lib folder.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
