parquet-java icon indicating copy to clipboard operation
parquet-java copied to clipboard

Published 20 hours ago • verified publisher icon apache

PARQUET-1367 upgrade a few libs for security reasons

Open mattdarwin opened this issue 6 years ago • 4 comments

There are a number of libraries which need updating. Among other reasons, there are several security issues filed in CVE for Hadoop and guava

mattdarwin avatar Aug 02 '18 16:08 mattdarwin

Looks like there are compilation failures, probably because of the Guava upgrade. Could you please have a look at it?

nandorKollar avatar Aug 03 '18 08:08 nandorKollar

Thanks, I've now pushed in the fix.

mattdarwin avatar Aug 03 '18 09:08 mattdarwin

I attempted to upgrade elephant bird (since 4.4 is also quite old), but it appears that from version 4.5 onwards they removed some packages, including com.twitter.elephantbird.thrift.test, so I had to revert it.

mattdarwin avatar Aug 06 '18 14:08 mattdarwin

Just rebased. It looks like a lot of the stuff is already on the master branch.

Fokko avatar Jan 02 '20 14:01 Fokko