From dc258107d5019f513e2242eccb1551c956c72fed Mon Sep 17 00:00:00 2001 From: Lari Hotari Date: Tue, 20 Jun 2023 19:36:57 +0300 Subject: [PATCH] [fix][sec] Upgrade snappy-java to address multiple CVEs (#20604) (cherry picked from commit 62a99ed1c9c602ca35607e2141d3772734d4c5b7) --- distribution/server/src/assemble/LICENSE.bin.txt | 2 +- pom.xml | 2 +- pulsar-sql/presto-distribution/LICENSE | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/distribution/server/src/assemble/LICENSE.bin.txt b/distribution/server/src/assemble/LICENSE.bin.txt index e4fd0cd139bc5..35266f1ebb2ad 100644 --- a/distribution/server/src/assemble/LICENSE.bin.txt +++ b/distribution/server/src/assemble/LICENSE.bin.txt @@ -532,7 +532,7 @@ The Apache Software License, Version 2.0 - org.apache.zookeeper-zookeeper-jute-3.8.1.jar - org.apache.zookeeper-zookeeper-prometheus-metrics-3.8.1.jar * Snappy Java - - org.xerial.snappy-snappy-java-1.1.8.4.jar + - org.xerial.snappy-snappy-java-1.1.10.1.jar * Google HTTP Client - com.google.http-client-google-http-client-gson-1.41.0.jar - com.google.http-client-google-http-client-1.41.0.jar diff --git a/pom.xml b/pom.xml index f40e6cde83f4a..fe831a937a42d 100644 --- a/pom.xml +++ b/pom.xml @@ -121,7 +121,7 @@ flexible messaging model and an intuitive client API. 3.8.1 1.5.0 1.10.0 - 1.1.8.4 + 1.1.10.1 4.1.12.1 5.1.0 4.1.93.Final diff --git a/pulsar-sql/presto-distribution/LICENSE b/pulsar-sql/presto-distribution/LICENSE index e58b034ebacba..ea1289c1cec15 100644 --- a/pulsar-sql/presto-distribution/LICENSE +++ b/pulsar-sql/presto-distribution/LICENSE @@ -466,7 +466,7 @@ The Apache Software License, Version 2.0 * GSON - gson-2.8.9.jar * Snappy - - snappy-java-1.1.8.4.jar + - snappy-java-1.1.10.1.jar * Jackson - jackson-module-parameter-names-2.14.2.jar * Java Assist