Skip to content

fix(sec): upgrade com.google.protobuf:protobuf-java to 3.16.1#6960

Merged
codope merged 2 commits intoapache:masterfrom
lxxawfl:oscs_fix_cd5s340au51t5k2gfie0
Dec 8, 2022
Merged

fix(sec): upgrade com.google.protobuf:protobuf-java to 3.16.1#6960
codope merged 2 commits intoapache:masterfrom
lxxawfl:oscs_fix_cd5s340au51t5k2gfie0

Conversation

@lxxawfl
Copy link
Contributor

@lxxawfl lxxawfl commented Oct 16, 2022

What happened?

There are 1 security vulnerabilities found in com.google.protobuf:protobuf-java 2.5.0

What did I do?

Upgrade com.google.protobuf:protobuf-java from 2.5.0 to 3.16.1 for vulnerability fix

What did you expect to happen?

Ideally, no insecure libs should be used.

How was this patch tested?

Run mvn compile failed locally, couldn't complete the build process.
Run mvn clean test failed locally, unit-test couldn't pass.

The specification of the pull request

PR Specification from OSCS

@xushiyan xushiyan added priority:medium Moderate impact; usability gaps dependencies Dependency updates labels Oct 31, 2022
@nsivabalan nsivabalan added the release-0.12.2 Patches targetted for 0.12.2 label Dec 6, 2022
@codope codope self-assigned this Dec 7, 2022
@codope codope force-pushed the oscs_fix_cd5s340au51t5k2gfie0 branch from 09dc9ed to 9d08a28 Compare December 7, 2022 12:50
Copy link
Member

@codope codope left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We can land once CI is green.

@hudi-bot
Copy link
Collaborator

hudi-bot commented Dec 7, 2022

CI report:

Bot commands @hudi-bot supports the following commands:
  • @hudi-bot run azure re-run the last Azure build

@codope codope merged commit 92490a8 into apache:master Dec 8, 2022
codope added a commit that referenced this pull request Dec 13, 2022
nsivabalan pushed a commit that referenced this pull request Dec 13, 2022
alexeykudinkin pushed a commit to onehouseinc/hudi that referenced this pull request Dec 14, 2022
alexeykudinkin pushed a commit to onehouseinc/hudi that referenced this pull request Dec 14, 2022
alexeykudinkin pushed a commit to onehouseinc/hudi that referenced this pull request Dec 14, 2022
alexeykudinkin pushed a commit to onehouseinc/hudi that referenced this pull request Dec 14, 2022
alexeykudinkin pushed a commit to onehouseinc/hudi that referenced this pull request Dec 14, 2022
alexeykudinkin pushed a commit to onehouseinc/hudi that referenced this pull request Dec 14, 2022
fengjian428 pushed a commit to fengjian428/hudi that referenced this pull request Apr 5, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates priority:medium Moderate impact; usability gaps release-0.12.2 Patches targetted for 0.12.2

Projects

Status: No status
Archived in project

Development

Successfully merging this pull request may close these issues.

5 participants