pulsar/0005-cve-2023-34455.patch
2023-12-01 09:41:46 +00:00

40 lines
1.8 KiB
Diff

diff --git a/distribution/server/src/assemble/LICENSE.bin.txt b/distribution/server/src/assemble/LICENSE.bin.txt
index 9b4a65d400..885ab204a5 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -529,7 +529,7 @@ The Apache Software License, Version 2.0
- org.apache.zookeeper-zookeeper-jute-3.6.3.jar
- org.apache.zookeeper-zookeeper-prometheus-metrics-3.6.3.jar
* Snappy Java
- - org.xerial.snappy-snappy-java-1.1.7.jar
+ - org.xerial.snappy-snappy-java-1.1.10.1.jar
* Google HTTP Client
- com.google.http-client-google-http-client-jackson2-1.41.0.jar
- com.google.http-client-google-http-client-gson-1.41.0.jar
diff --git a/pom.xml b/pom.xml
index 3fa8222bc5..fa629aeb7c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -107,7 +107,7 @@ flexible messaging model and an intuitive client API.</description>
<bookkeeper.version>4.14.7</bookkeeper.version>
<zookeeper.version>3.6.3</zookeeper.version>
<commons-cli.version>1.5.0</commons-cli.version>
- <snappy.version>1.1.7</snappy.version> <!-- ZooKeeper server -->
+ <snappy.version>1.1.10.1</snappy.version> <!-- ZooKeeper server -->
<dropwizardmetrics.version>3.2.5</dropwizardmetrics.version> <!-- ZooKeeper server -->
<curator.version>5.1.0</curator.version>
<netty.version>4.1.89.Final</netty.version>
diff --git a/pulsar-sql/presto-distribution/LICENSE b/pulsar-sql/presto-distribution/LICENSE
index 6fa2572afb..ccfbd70877 100644
--- a/pulsar-sql/presto-distribution/LICENSE
+++ b/pulsar-sql/presto-distribution/LICENSE
@@ -457,7 +457,7 @@ The Apache Software License, Version 2.0
* GSON
- gson-2.8.9.jar
* Snappy
- - snappy-java-1.1.7.jar
+ - snappy-java-1.1.10.1.jar
* Jackson
- jackson-module-parameter-names-2.13.4.jar
* Java Assist