Brisly Priya Joseph created HIVE-25412:
------------------------------------------
Summary: Fix vulnerabilities in Hive Metastore Standalone
Key: HIVE-25412
URL: https://issues.apache.org/jira/browse/HIVE-25412
Project: Hive
Issue Type: Task
Components: Standalone Metastore
Affects Versions: 3.0.0
Reporter: Brisly Priya Joseph
The following vulnerabilities are detected in Standalone Hive Metastore:
CVE-2019-12814 - jackson-databind-2.9.4 - (Fix available in
jackson-databind-2.9.9.1)
CVE-2020-8840 - jackson-databind-2.9.4 - (Fix available in
jackson-databind-2.9.10.3,2.8.11.5)
CVE-2019-16943 - jackson-databind-2.9.4 - (Fix available in
jackson-databind-2.9.10.1,2.10.0)
CVE-2018-10237 - guava-19.0 - (Fix available in guava-25.0,24.1.1,23.6.1)
CVE-2015-1832 - derby-10.10.2.0 - (Fix available in derby-10.14.2.0)
please upgrade the packages to the mentioned versions with fix.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
