Re: Regarding log4j2 upgrade: HIVE-25804, HIVE-25795 related to CVE-2021-44228

2021-12-22 Thread Sundaram, Ramakrishnan
PR’s, if you’ve any other doubts!!.. --Brahma Reddy Battula From: Sundaram, Ramakrishnan Date: Thursday, 16 December 2021 at 11:48 AM To: dev@hive.apache.org Cc: secur...@hive.apache.org Subject: Re: Regarding log4j2 upgrade: HIVE-25804, HIVE-25795 related to CVE-20

Re: Regarding log4j2 upgrade: HIVE-25804, HIVE-25795 related to CVE-2021-44228

2021-12-15 Thread Sundaram, Ramakrishnan
0%7C0%7C637752257657443876%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=YPJ%2ByXk8vDDCiY1379vAu4sqV5NrKwo6BheYQLTD95U%3D&reserved=0 If you are interested, you raise PR for branch-2 and branc-3. From: Sundaram, Ramakrishnan

Re: Regarding log4j2 upgrade: HIVE-25804, HIVE-25795 related to CVE-2021-44228

2021-12-15 Thread Sundaram, Ramakrishnan
+ security From: "Sundaram, Ramakrishnan" Date: Wednesday, December 15, 2021 at 1:32 PM To: "dev@hive.apache.org" Subject: Regarding log4j2 upgrade: HIVE-25804, HIVE-25795 related to CVE-2021-44228 Hi, I see in HIVE-25804 and HIVE-25795, testutils/ptest2/pom.xml is not

Regarding log4j2 upgrade: HIVE-25804, HIVE-25795 related to CVE-2021-44228

2021-12-15 Thread Sundaram, Ramakrishnan
Hi, I see in HIVE-25804 and HIVE-25795, testutils/ptest2/pom.xml is not upgraded to latest versions. Is this a miss? Or the change is not needed? Regards, Ram