CVE-2018-1314

Advisory

Py-hiverunner 5.0.0 updates the default supported Hive version to 2.3.4 because version 2.3.3 has a vulnerability. See: CVE-2018-1314.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Added
- JUnit5 [Extension](https://junit.org/junit5/docs/current/user-guide/extensions) support with `HiveRunnerExtension`. See [106](https://github.com/klarna/HiveRunner/issues/106).

Changed
- Default supported Hive version is now 2.3.4 (was 2.3.3) as version 2.3.3 has a [vulnerability](https://nvd.nist.gov/vuln/detail/CVE-2018-1314).
- `TemporaryFolder` ([JUnit 4](https://junit.org/junit4/javadoc/4.12/org/junit/rules/TemporaryFolder.html)) has been changed to `Path` ([Java NIO](https://docs.oracle.com/javase/8/docs/api/java/nio/file/Path.html)) throughout the project for the JUnit5 update.
- NOTE: The `HiveServerContext` class now uses `Path` instead of `TemporaryFolder` in the constructor.

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1314