There is a vulnerability in Apache Hive 1.2.2 ,upgrade recommended
Open
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 306
- Forks
- 75
- PR merge metrics
- No merged PRs in 30d
Description
https://github.com/linkedin/transport/blob/92dfbbfd989367418bdd14f9ac4cc2bcf1e7c777/transportable-udfs-hive/build.gradle#L8
CVE-2018-1282 CVE-2018-11777 CVE-2018-1314 CVE-2020-1926
Recommended upgrade version：2.3.8
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at transportable-udfs-hive/build.gradle, specifically line 8, and inspect the Apache Hive dependency against CVE-2018-1282, CVE-2018-11777, CVE-2018-1314, and CVE-2020-1926. Update the dependency to the recommended 2.3.8 version and verify that the project still builds successfully.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- build-system, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 45/100