[ https://issues.apache.org/jira/browse/HIVE-22374?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16960426#comment-16960426 ]
Hive QA commented on HIVE-22374: -------------------------------- Here are the results of testing the latest attachment: https://issues.apache.org/jira/secure/attachment/12984122/HIVE-22374.2.patch {color:red}ERROR:{color} -1 due to no test(s) being added or modified. {color:green}SUCCESS:{color} +1 due to 17545 tests passed Test results: https://builds.apache.org/job/PreCommit-HIVE-Build/19167/testReport Console output: https://builds.apache.org/job/PreCommit-HIVE-Build/19167/console Test logs: http://104.198.109.242/logs/PreCommit-HIVE-Build-19167/ Messages: {noformat} Executing org.apache.hive.ptest.execution.TestCheckPhase Executing org.apache.hive.ptest.execution.PrepPhase Executing org.apache.hive.ptest.execution.YetusPhase Executing org.apache.hive.ptest.execution.ExecutionPhase Executing org.apache.hive.ptest.execution.ReportingPhase {noformat} This message is automatically generated. ATTACHMENT ID: 12984122 - PreCommit-HIVE-Build > Upgrade commons-compress version to 1.19 > ---------------------------------------- > > Key: HIVE-22374 > URL: https://issues.apache.org/jira/browse/HIVE-22374 > Project: Hive > Issue Type: Bug > Components: Hive > Reporter: Sumin Byeon > Assignee: Sumin Byeon > Priority: Critical > Attachments: HIVE-22374.1.patch, HIVE-22374.2.patch > > > As described in > [CVE-2019-12402|https://nvd.nist.gov/vuln/detail/CVE-2019-12402], > {{commons-compress:1.18}} has an issue where certain inputs may cause an > infinite loop which leads to a denial of service attack. > This patch simply upgrades {{common-compress}} versions from 1.18 to 1.19 > which is the latest minor version at the date of filing this issue ([Maven > repo|https://mvnrepository.com/artifact/org.apache.commons/commons-compress]). -- This message was sent by Atlassian Jira (v8.3.4#803005)