hive
hive copied to clipboard
HIVE-28577: Upgrade protobuf version to 3.25.5 to fix CVE
What changes were proposed in this pull request?
Upgrading protobuf version to 3.25.5
Why are the changes needed?
To fix CVE: CVE-2024-7254 and to be in sync with TEZ (master branch) protobuf version as well.
Does this PR introduce any user-facing change?
NO
Is the change a dependency upgrade?
How was this patch tested?
Will see output of Jenkins
For protobuf 3.25.5 generated code:
- Downloaded protoc 3.25.5 and set it in the classpath.
- Built hive project with the command:
mvn clean install -DskipTests -Pitests,dist,qsplits,errorProne,protobuf -Drat.skip=true
Quality Gate passed
Issues
0 New issues
0 Accepted issues
Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code
@ayushtkn , can you please review this?