viirya commented on pull request #29326:
URL: https://github.com/apache/spark/pull/29326#issuecomment-668878065


   I did some tests. Few changes are required to pass the failed Hive tests:
   
   1. Shading Guava at hive-exec packaging and a few code changes to 
hive-common and hive-exec regarding Guava usage
   2. Don't use `core` classifier for hive dependencies in Spark
   
   But this just upgrades Guava version used in Spark. Hive dependencies still 
use older Guava with the reported CVE.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscr...@spark.apache.org
For additional commands, e-mail: reviews-h...@spark.apache.org

Reply via email to