Skip to content

Commit b13ede2

Browse files
aimethedaimethed
committed
address zookeeper cve 3.7.0
1 parent 09101a7 commit b13ede2

File tree

5 files changed

+59
-8
lines changed

5 files changed

+59
-8
lines changed

‎athena-cloudera-hive/META-INF/maven/org.apache.zookeeper/zookeeper-jute/pom.properties‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
artifactId=zookeeper-jute
2+
groupId=org.apache.zookeeper
3+
version=3.8.4

‎athena-cloudera-hive/META-INF/maven/org.apache.zookeeper/zookeeper/pom.properties‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
artifactId=zookeeper
2+
groupId=org.apache.zookeeper
3+
version=3.9.1

‎athena-cloudera-hive/pom.xml‎

Lines changed: 25 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,9 @@
88
<modelVersion>4.0.0</modelVersion>
99
<artifactId>athena-cloudera-hive</artifactId>
1010
<version>2022.47.1</version>
11+
<properties>
12+
<clouderaVersion>2.6.23.1027</clouderaVersion>
13+
</properties>
1114
<dependencies>
1215
<dependency>
1316
<groupId>com.amazonaws</groupId>
@@ -21,10 +24,20 @@
2124
<version>2022.47.1</version>
2225
</dependency>
2326
<dependency>
24-
<groupId>org.apache.hive</groupId>
25-
<artifactId>hive-jdbc</artifactId>
26-
<version>3.1.3</version>
27-
<!-- Updated from proprietary Cloudera driver to address zookeeper CVE vulnerabilities -->
27+
<groupId>Hive</groupId>
28+
<artifactId>HiveJDBC42</artifactId>
29+
<version>${clouderaVersion}</version>
30+
<exclusions>
31+
<exclusion>
32+
<groupId>org.apache.zookeeper</groupId>
33+
<artifactId>zookeeper</artifactId>
34+
</exclusion>
35+
</exclusions>
36+
</dependency>
37+
<dependency>
38+
<groupId>org.apache.zookeeper</groupId>
39+
<artifactId>zookeeper</artifactId>
40+
<version>3.9.1</version>
2841
</dependency>
2942
<dependency>
3043
<groupId>com.amazonaws</groupId>
@@ -88,6 +101,14 @@
88101
<exclude>META-INF/*.RSA</exclude>
89102
</excludes>
90103
</filter>
104+
<filter>
105+
<artifact>Hive:HiveJDBC42</artifact>
106+
<excludes>
107+
<exclude>org/apache/zookeeper/**</exclude>
108+
<exclude>com/cloudera/hive/jdbc42/internal/apache/zookeeper/**</exclude>
109+
<exclude>META-INF/maven/org.apache.zookeeper/**</exclude>
110+
</excludes>
111+
</filter>
91112
</filters>
92113
<transformers>
93114
<!-- This transformer is here to concatenate log4j2 cache during shading -->

‎athena-hortonworks-hive/META-INF/maven/org.apache.zookeeper/zookeeper/pom.properties‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
artifactId=zookeeper
2+
groupId=org.apache.zookeeper
3+
version=3.9.1

‎athena-hortonworks-hive/pom.xml‎

Lines changed: 25 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,9 @@
88
<modelVersion>4.0.0</modelVersion>
99
<artifactId>athena-hortonworks-hive</artifactId>
1010
<version>2022.47.1</version>
11+
<properties>
12+
<clouderaVersion>2.6.23.1027</clouderaVersion>
13+
</properties>
1114
<dependencies>
1215
<dependency>
1316
<groupId>com.amazonaws</groupId>
@@ -21,10 +24,20 @@
2124
<version>2022.47.1</version>
2225
</dependency>
2326
<dependency>
24-
<groupId>org.apache.hive</groupId>
25-
<artifactId>hive-jdbc</artifactId>
26-
<version>3.1.3</version>
27-
<!-- Updated from proprietary Cloudera driver to address zookeeper CVE vulnerabilities -->
27+
<groupId>Hive</groupId>
28+
<artifactId>HiveJDBC42</artifactId>
29+
<version>${clouderaVersion}</version>
30+
<exclusions>
31+
<exclusion>
32+
<groupId>org.apache.zookeeper</groupId>
33+
<artifactId>zookeeper</artifactId>
34+
</exclusion>
35+
</exclusions>
36+
</dependency>
37+
<dependency>
38+
<groupId>org.apache.zookeeper</groupId>
39+
<artifactId>zookeeper</artifactId>
40+
<version>3.9.1</version>
2841
</dependency>
2942
<dependency>
3043
<groupId>com.amazonaws</groupId>
@@ -83,6 +96,14 @@
8396
<exclude>META-INF/*.RSA</exclude>
8497
</excludes>
8598
</filter>
99+
<filter>
100+
<artifact>Hive:HiveJDBC42</artifact>
101+
<excludes>
102+
<exclude>org/apache/zookeeper/**</exclude>
103+
<exclude>com/cloudera/hive/jdbc42/internal/apache/zookeeper/**</exclude>
104+
<exclude>META-INF/maven/org.apache.zookeeper/**</exclude>
105+
</excludes>
106+
</filter>
86107
</filters>
87108
<transformers>
88109
<!-- This transformer is here to concatenate log4j2 cache during shading -->

0 commit comments

Comments
 (0)