This message was deleted.
# devs
Slackbot
09/12/2023, 9:24 PMThis message was deleted.
c
Clint Wylie
09/12/2023, 10:19 PMcould you share the list? im aware of a handful of CVEs which were related to our continued support of hadoop 2 which required us to keep using some very old dependencies, but that support is going to be dropped in 28 release so its probable that we can fix those at least
Clint Wylie
09/15/2023, 4:32 AMthanks, i think at least some of these are going to be fixed in 28 release, for example calcite upgrade https://github.com/apache/druid/pull/14510, maybe google client upgrades https://github.com/apache/druid/pull/14414, and there are a bunch of other dependency updates we’ve done since dropping hadoop 2; i’ll relay the rest of the list to some people to see if i can find someone to look into the others
m
Michael Armitage
11/09/2023, 11:54 AMAny idea if these will be making the 28 release?