jffwang
/
hetu-core
0
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

upgrade software dependency to solve CVEs 

Signed-off-by: chenpingzeng <chenpingzeng@huawei.com>
This commit is contained in:
chenpingzeng 2022-06-08 15:16:51 +08:00
parent 1547e6b6b1
commit ac5d8d3dca
7 changed files with 29 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
hetu-hazelcast/pom.xml
View File

@ -17,7 +17,7 @@
<jline.version>3.21.0</jline.version>
<hazelcast.version>5.1</hazelcast.version>
<aspectjweaver.version>1.9.4</aspectjweaver.version>
<spring-context.version>5.2.19.RELEASE</spring-context.version>
<spring-context.version>5.3.20</spring-context.version>
<cache-api.version>1.1.1</cache-api.version>
<jmockit.version>1.38</jmockit.version>
</properties>

4
hetu-hbase/pom.xml
View File

@ -14,7 +14,7 @@
<properties>
<air.main.basedir>${project.parent.basedir}</air.main.basedir>
<dep.log4j.version>2.17.1</dep.log4j.version>
<dep.log4j.version>2.17.2</dep.log4j.version>
<version.annotations>13.0</version.annotations>
<version.validation-api>2.0.1.Final</version.validation-api>
<version.commons-lang3>3.10</version.commons-lang3>
@ -249,7 +249,7 @@
<dependency>
<groupId>org.eclipse.jetty</groupId>
<artifactId>jetty-webapp</artifactId>
<version>9.4.43.v20210629</version>
<version>9.4.46.v20220331</version>
<scope>runtime</scope>
</dependency>
<dependency>

4
pom.xml
View File

@ -59,7 +59,7 @@
<dep.prestosql.version>316</dep.prestosql.version>
<dep.jackson.version>2.11.4</dep.jackson.version>
<dep.hetu.version>${project.version}</dep.hetu.version>
<dep.jetty.version>9.4.43.v20210629</dep.jetty.version>
<dep.jetty.version>9.4.46.v20220331</dep.jetty.version>
<dep.bcprov.version>1.66</dep.bcprov.version>
<dep.hudi.version>0.7.0</dep.hudi.version>
<dep.kryo.version>5.0.3</dep.kryo.version>
@ -912,7 +912,7 @@
<dependency>
<groupId>mysql</groupId>
<artifactId>mysql-connector-java</artifactId>
<version>5.1.47</version>
<version>5.1.49</version>
</dependency>
<dependency>

2
presto-elasticsearch/pom.xml
View File

@ -14,7 +14,7 @@
<properties>
<air.main.basedir>${project.parent.basedir}</air.main.basedir>
<dep.log4j.version>2.17.1</dep.log4j.version>
<dep.log4j.version>2.17.2</dep.log4j.version>
<dep.elasticsearch.version>6.0.0</dep.elasticsearch.version>
<httpcore-nio.version>4.4.5</httpcore-nio.version>
</properties>

2
presto-memory/pom.xml
View File

@ -205,7 +205,7 @@
<dependency>
<groupId>org.springframework</groupId>
<artifactId>spring-test</artifactId>
<version>5.2.19.RELEASE</version>
<version>5.3.20</version>
<scope>test</scope>
<exclusions>
<exclusion>

11
presto-record-decoder/pom.xml
View File

@ -70,9 +70,20 @@
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
</exclusion>
<exclusion>
<groupId>org.apache.commons</groupId>
<artifactId>commons-compress</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-compress</artifactId>
<version>1.21</version>
<scope>runtime</scope>
</dependency>
<dependency>
<groupId>org.xerial.snappy</groupId>
<artifactId>snappy-java</artifactId>

11
presto-redis/pom.xml
View File

@ -185,9 +185,20 @@
<groupId>org.slf4j</groupId>
<artifactId>slf4j-api</artifactId>
</exclusion>
<exclusion>
<groupId>org.apache.commons</groupId>
<artifactId>commons-compress</artifactId>
</exclusion>
</exclusions>
</dependency>
<dependency>
<groupId>org.apache.commons</groupId>
<artifactId>commons-compress</artifactId>
<version>1.21</version>
<scope>runtime</scope>
</dependency>
<dependency>
<groupId>org.testng</groupId>
<artifactId>testng</artifactId>