Merge pull request #1499 from rsleem/BACKLOG-41903

[PPP-5382] updated hive-service dependency to exclude hive-exec transitive dependency to avoid airCompressor vesrion with security vulnerability
pentaho · Nov 4, 2024 · 0204160 · 0204160
2 parents 962a681 + e423c6f
commit 0204160
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/shims/apachevanilla/driver/pom.xml b/shims/apachevanilla/driver/pom.xml
@@ -449,6 +449,21 @@
           <artifactId>velocity</artifactId>
           <groupId>org.apache.velocity</groupId>
         </exclusion>
+        <exclusion>
+          <groupId>org.apache.hive</groupId>
+          <artifactId>hive-exec</artifactId>
+        </exclusion>
+      </exclusions>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.hive</groupId>
+      <artifactId>hive-exec</artifactId>
+      <version>${org.apache.hive.version}</version>
+      <exclusions>
+        <exclusion>
+          <groupId>io.airlift</groupId>
+          <artifactId>aircompressor</artifactId>
+        </exclusion>
       </exclusions>
     </dependency>
     <dependency>