>From Michael Blow <[email protected]>:

Attention is currently required from: Hussain Towaileb.
Michael Blow has posted comments on this change. ( 
https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/17548 )

Change subject: [NO ISSUE][*DB]: Update smart-json to avoid encountered CVE
......................................................................


Patch Set 3: Code-Review+2

(1 comment)

File hyracks-fullstack/hyracks/hyracks-hdfs/pom.xml:

https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/17548/comment/c697271b_92485a70
PS3, Line 177:     <dependency>
             :       <groupId>org.apache.hadoop</groupId>
             :       <artifactId>hadoop-common</artifactId>
             :       <version>${hadoop.version}</version>
             :       <type>test-jar</type>
             :       <classifier>tests</classifier>
             :       <scope>test</scope>
             :       <exclusions>
             :         <exclusion>
             :           <groupId>net.minidev</groupId>
             :           <artifactId>json-smart</artifactId>
             :         </exclusion>
             :         <exclusion>
             :           <groupId>log4j</groupId>
             :           <artifactId>log4j</artifactId>
             :         </exclusion>
             :         <exclusion>
             :           <groupId>org.slf4j</groupId>
             :           <artifactId>slf4j-api</artifactId>
             :         </exclusion>
             :         <exclusion>
             :           <groupId>org.slf4j</groupId>
             :           <artifactId>slf4j-log4j12</artifactId>
             :         </exclusion>
             :         <!-- TODO(htowaileb): Remove after updating to hadoop 
3.3.4 -->
             :         <exclusion>
             :           <groupId>org.eclipse.jetty</groupId>
             :           <artifactId>jetty-util</artifactId>
             :         </exclusion>
             :       </exclusions>
             :     </dependency>
Doesn't need to be now, but in general the bulk of this configuration belongs 
in the dependencyManagement section, probably in the parent hyracks POM.



--
To view, visit https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/17548
To unsubscribe, or for help writing mail filters, visit 
https://asterix-gerrit.ics.uci.edu/settings

Gerrit-Project: asterixdb
Gerrit-Branch: stabilization-667a908755
Gerrit-Change-Id: I6cceff58ae80042c1421de4acb97dbfa3549168a
Gerrit-Change-Number: 17548
Gerrit-PatchSet: 3
Gerrit-Owner: Hussain Towaileb <[email protected]>
Gerrit-Reviewer: Anon. E. Moose #1000171
Gerrit-Reviewer: Hussain Towaileb <[email protected]>
Gerrit-Reviewer: Jenkins <[email protected]>
Gerrit-Reviewer: Michael Blow <[email protected]>
Gerrit-Attention: Hussain Towaileb <[email protected]>
Gerrit-Comment-Date: Tue, 23 May 2023 14:34:46 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: Yes
Gerrit-MessageType: comment

Reply via email to