This is an automated email from the ASF dual-hosted git repository.
sankarh pushed a commit to branch branch-3
in repository https://gitbox.apache.org/repos/asf/hive.git
The following commit(s) were added to refs/heads/branch-3 by this push:
new 8f4e0ab0dcd HIVE-25726: Upgrade velocity to 2.3 due to CVE-2020-13936
(Sourabh Goyal via Naveen Gangam)
8f4e0ab0dcd is described below
commit 8f4e0ab0dcddc29b2870fb1f6eb41b24d1e02f03
Author: Diksha628 <43694846+diksha...@users.noreply.github.com>
AuthorDate: Tue May 23 20:02:55 2023 +0530
HIVE-25726: Upgrade velocity to 2.3 due to CVE-2020-13936 (Sourabh Goyal
via Naveen Gangam)
Co-authored-by: Sourabh Goyal <soura...@cloudera.com>
Signed-off-by: Sankar Hariappan <sank...@apache.org>
Closes (#4308)
---
pom.xml | 4 ++--
vector-code-gen/pom.xml | 11 -----------
2 files changed, 2 insertions(+), 13 deletions(-)
diff --git a/pom.xml b/pom.xml
index 399205c76f9..3b48d9cf93f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -205,7 +205,7 @@
<tempus-fugit.version>1.1</tempus-fugit.version>
<snappy.version>1.1.4</snappy.version>
<wadl-resourcedoc-doclet.version>1.4</wadl-resourcedoc-doclet.version>
- <velocity.version>1.5</velocity.version>
+ <velocity.version>2.3</velocity.version>
<xerces.version>2.9.1</xerces.version>
<zookeeper.version>3.4.6</zookeeper.version>
<jpam.version>1.1</jpam.version>
@@ -462,7 +462,7 @@
</dependency>
<dependency>
<groupId>org.apache.velocity</groupId>
- <artifactId>velocity</artifactId>
+ <artifactId>velocity-engine-core</artifactId>
<version>${velocity.version}</version>
</dependency>
<dependency>
diff --git a/vector-code-gen/pom.xml b/vector-code-gen/pom.xml
index 0c62d604722..ec551ae1f3e 100644
--- a/vector-code-gen/pom.xml
+++ b/vector-code-gen/pom.xml
@@ -49,17 +49,6 @@
<artifactId>ant</artifactId>
<version>${ant.version}</version>
</dependency>
- <dependency>
- <groupId>org.apache.velocity</groupId>
- <artifactId>velocity</artifactId>
- <version>${velocity.version}</version>
- <exclusions>
- <exclusion>
- <groupId>commons-collections</groupId>
- <artifactId>commons-collections</artifactId>
- </exclusion>
- </exclusions>
- </dependency>
</dependencies>
<build>
