Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-25945

Upgrade H2 database version to 2.1.210

    XMLWordPrintableJSON

Details

    Description

      The 1.3.166 version, which is in use in Hive, suffers from the following security vulnerabilities:
      https://nvd.nist.gov/vuln/detail/CVE-2021-42392
      https://nvd.nist.gov/vuln/detail/CVE-2022-23221

      In the project, we use H2 only for testing purposes (inside the jdbc-handler module) thus the H2 binaries are not present in the runtime classpath thus these CVEs do not pose a problem for Hive or its users. Nevertheless, it would be good to upgrade to a more recent version to avoid Hive coming up in vulnerability scans due to this.

      Attachments

        Issue Links

          is cloned by

          Task - A task that needs to be done. HIVE-26566 Upgrade H2 database version to 2.1.214

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          Is contained by

          Sub-task - The sub-task of the issue HIVE-26749 CVE Upgrades for 3.2.0 release

          • Blocker - Blocks development and/or testing work, production could not run
          • Open

          Improvement - An improvement or enhancement to an existing feature or task. HIVE-26751 Bug Fixes and Improvements for 3.2.0 release

          • Blocker - Blocks development and/or testing work, production could not run
          • Open
          is depended upon by

          Bug - A problem which impairs or prevents the functions of the product. HIVE-26350 IndexOutOfBoundsException when generating splits for external JDBC table with partition columns

          • Major - Major loss of function.
          • Closed
          links to

          Web Link GitHub Pull Request #3012

          Web Link GitHub Pull Request #4600

          Activity

            People

              zabetak Stamatis Zampetakis
              zabetak Stamatis Zampetakis
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 20m
                  20m