Skip to content

Commit

Permalink
[CVE Patch] Version Bump: SpringFramework and GSON (opendistro-for-el…
Browse files Browse the repository at this point in the history
…asticsearch#1178)

* [CVE Patch] Version Bump: SpringFramework

Signed-off-by: Peng Huo <[email protected]>

* [CVE Patch] Version Bump: gson

Signed-off-by: Peng Huo <[email protected]>
  • Loading branch information
penghuo committed Jul 19, 2022
1 parent 46649d1 commit 70cee0d
Show file tree
Hide file tree
Showing 5 changed files with 10 additions and 11 deletions.
6 changes: 3 additions & 3 deletions core/build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -17,8 +17,8 @@ repositories {
dependencies {
// https://github.com/google/guava/wiki/CVE-2018-10237
compile group: 'com.google.guava', name: 'guava', version: '29.0-jre'
compile group: 'org.springframework', name: 'spring-context', version: '5.2.5.RELEASE'
compile group: 'org.springframework', name: 'spring-beans', version: '5.2.5.RELEASE'
compile group: 'org.springframework', name: 'spring-context', version: '5.2.20.RELEASE'
compile group: 'org.springframework', name: 'spring-beans', version: '5.2.20.RELEASE'
compile group: 'org.apache.commons', name: 'commons-lang3', version: '3.10'
compile group: 'com.facebook.presto', name: 'presto-matching', version: '0.240'
compile project(':common')
Expand Down Expand Up @@ -74,4 +74,4 @@ jacocoTestCoverageVerification {
}))
}
}
check.dependsOn jacocoTestCoverageVerification
check.dependsOn jacocoTestCoverageVerification
2 changes: 1 addition & 1 deletion integ-test/build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,7 @@ dependencies {
}
testCompile group: 'com.h2database', name: 'h2', version: '1.4.200'
testCompile group: 'org.xerial', name: 'sqlite-jdbc', version: '3.28.0'
testCompile group: 'com.google.code.gson', name: 'gson', version: '2.8.6'
testCompile group: 'com.google.code.gson', name: 'gson', version: '2.8.9'
}

dependencyLicenses.enabled = false
Expand Down
2 changes: 1 addition & 1 deletion plugin/build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ configurations.all {
}

dependencies {
compile group: 'org.springframework', name: 'spring-beans', version: '5.2.5.RELEASE'
compile group: 'org.springframework', name: 'spring-beans', version: '5.2.20.RELEASE'
compile project(":ppl")
compile project(':legacy')
compile project(':elasticsearch')
Expand Down
7 changes: 3 additions & 4 deletions ppl/build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -27,10 +27,9 @@ dependencies {
compile "org.antlr:antlr4-runtime:4.7.1"
// https://github.com/google/guava/wiki/CVE-2018-10237
compile group: 'com.google.guava', name: 'guava', version: '29.0-jre'
compile group: 'org.elasticsearch', name: 'elasticsearch-x-content', version: "${es_version}"
compile group: 'org.json', name: 'json', version: '20180813'
compile group: 'org.springframework', name: 'spring-context', version: '5.2.5.RELEASE'
compile group: 'org.springframework', name: 'spring-beans', version: '5.2.5.RELEASE'
compile group: 'org.springframework', name: 'spring-context', version: '5.2.20.RELEASE'
compile group: 'org.springframework', name: 'spring-beans', version: '5.2.20.RELEASE'
compile group: 'org.apache.logging.log4j', name: 'log4j-core', version:'2.11.1'
compile project(':common')
compile project(':core')
Expand Down Expand Up @@ -82,4 +81,4 @@ jacocoTestCoverageVerification {
}))
}
}
check.dependsOn jacocoTestCoverageVerification
check.dependsOn jacocoTestCoverageVerification
4 changes: 2 additions & 2 deletions sql/build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -28,8 +28,8 @@ dependencies {
// https://github.com/google/guava/wiki/CVE-2018-10237
implementation group: 'com.google.guava', name: 'guava', version: '29.0-jre'
compile group: 'org.json', name: 'json', version:'20180813'
compile group: 'org.springframework', name: 'spring-context', version: '5.2.5.RELEASE'
compile group: 'org.springframework', name: 'spring-beans', version: '5.2.5.RELEASE'
compile group: 'org.springframework', name: 'spring-context', version: '5.2.20.RELEASE'
compile group: 'org.springframework', name: 'spring-beans', version: '5.2.20.RELEASE'
compile project(':common')
compile project(':core')
compile project(':protocol')
Expand Down

0 comments on commit 70cee0d

Please sign in to comment.