Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-25639

Exclude tomcat-embed-core from libthrift

    XMLWordPrintableJSON

Details

    • Bug
    • Status: In Progress
    • Major
    • Resolution: Unresolved
    • None
    • None
    • Thrift API
    • None

    Description

      After Thrift dependency up-gradation to 0.14.1 to fix a known CVE but a dependency issue in libthrift brings in tomcat-embed-core which has many vulnerabilities. See: THRIFT-5375
      Since this dependency is used in Thrift only for a test we can safely exclude it inside Hive.

      Attachments

        Activity

          People

            RANith Ranith Sardar
            RANith Ranith Sardar
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: