[
https://issues.apache.org/jira/browse/HIVE-26079?focusedWorklogId=797996&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-797996
]
ASF GitHub Bot logged work on HIVE-26079:
-----------------------------------------
Author: ASF GitHub Bot
Created on: 04/Aug/22 12:58
Start Date: 04/Aug/22 12:58
Worklog Time Spent: 10m
Work Description: ayushtkn commented on PR #3500:
URL: https://github.com/apache/hive/pull/3500#issuecomment-1205221700
3.19.2 should also allow I feel:
https://repo1.maven.org/maven2/com/google/protobuf/protoc/3.19.2/
I wanted to stay with Hadoop for now. OSX won't be used for actual
deployments though, but yes for dev env for sure.(I am myself on OSX)
These google dependencies are very good with breaking backward compat, As of
now I think I just had 2 HBase failures, which I got fixed, Hopefully won't
have any other. But I can check with folks like what issues can it have if we
move above hadoop, earlier both hadoop & hive were on 2.5.0
Issue Time Tracking
-------------------
Worklog Id: (was: 797996)
Time Spent: 2h 40m (was: 2.5h)
> Upgrade protobuf to 3.16.1
> --------------------------
>
> Key: HIVE-26079
> URL: https://issues.apache.org/jira/browse/HIVE-26079
> Project: Hive
> Issue Type: Task
> Reporter: Ashish Sharma
> Assignee: Ashish Sharma
> Priority: Major
> Labels: pull-request-available
> Time Spent: 2h 40m
> Remaining Estimate: 0h
>
> Upgrade com.google.protobuf:protobuf-java from 2.5.0 to 3.16.1 to fix
> CVE-2021-22569
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
