This is an automated email from the ASF dual-hosted git repository. liyafan pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/calcite.git
commit 07edf272be60cf044b226639500f7ae6f92a53bc Author: Stamatis Zampetakis <[email protected]> AuthorDate: Wed Feb 9 17:52:19 2022 +0100 [CALCITE-5007] Upgrade H2 database version to 2.1.210 The 1.4.197 version suffers from multiple CVEs such as: https://nvd.nist.gov/vuln/detail/CVE-2018-14335 https://nvd.nist.gov/vuln/detail/CVE-2018-10054 https://nvd.nist.gov/vuln/detail/CVE-2021-42392 https://nvd.nist.gov/vuln/detail/CVE-2022-23221 In the project, we use H2 only for testing purposes thus the H2 binaries are not present in the runtime classpath thus these CVEs do not pose a problem for Calcite or its users. Close apache/calcite#2717 --- gradle.properties | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle.properties b/gradle.properties index e9e6485..740d73d 100644 --- a/gradle.properties +++ b/gradle.properties @@ -100,7 +100,7 @@ foodmart-data-json.version=0.4 foodmart-queries.version=0.4.1 geode-core.version=1.10.0 guava.version=29.0-jre -h2.version=1.4.197 +h2.version=2.1.210 hadoop.version=2.7.5 hamcrest-date.version=2.0.4 hamcrest.version=2.1
