This is an automated email from the ASF dual-hosted git repository.
cgivre pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/drill.git
The following commit(s) were added to refs/heads/master by this push:
new 6c5d2fa DRILL-8165: Upgrade liquibase because of CVE-2022-0839 (#2497)
6c5d2fa is described below
commit 6c5d2fa68ef028bcd4c20f6c1693e43a95326638
Author: luoc <[email protected]>
AuthorDate: Mon Mar 21 22:09:59 2022 +0800
DRILL-8165: Upgrade liquibase because of CVE-2022-0839 (#2497)
---
metastore/rdbms-metastore/pom.xml | 2 +-
.../src/main/java/org/apache/drill/metastore/rdbms/RdbmsMetastore.java | 2 ++
2 files changed, 3 insertions(+), 1 deletion(-)
diff --git a/metastore/rdbms-metastore/pom.xml
b/metastore/rdbms-metastore/pom.xml
index 34ea90b..e9925b1 100644
--- a/metastore/rdbms-metastore/pom.xml
+++ b/metastore/rdbms-metastore/pom.xml
@@ -32,7 +32,7 @@
<properties>
<jooq.version>3.13.1</jooq.version>
- <liquibase.version>3.8.7</liquibase.version>
+ <liquibase.version>4.8.0</liquibase.version>
<sqlite.version>3.30.1</sqlite.version>
</properties>
diff --git
a/metastore/rdbms-metastore/src/main/java/org/apache/drill/metastore/rdbms/RdbmsMetastore.java
b/metastore/rdbms-metastore/src/main/java/org/apache/drill/metastore/rdbms/RdbmsMetastore.java
index 0d19a52..a8f1355 100644
---
a/metastore/rdbms-metastore/src/main/java/org/apache/drill/metastore/rdbms/RdbmsMetastore.java
+++
b/metastore/rdbms-metastore/src/main/java/org/apache/drill/metastore/rdbms/RdbmsMetastore.java
@@ -117,6 +117,8 @@ public class RdbmsMetastore implements Metastore {
private void initTables(DataSource dataSource) {
try (Connection connection = dataSource.getConnection()) {
JdbcConnection jdbcConnection = new JdbcConnection(connection);
+ // TODO It is recommended to use the new function if the following issue
is resolved.
+ // https://github.com/liquibase/liquibase/issues/2349
Database database =
DatabaseFactory.getInstance().findCorrectDatabaseImplementation(jdbcConnection);
ClassLoaderResourceAccessor resourceAccessor = new
ClassLoaderResourceAccessor();
try (Liquibase liquibase = new Liquibase(LIQUIBASE_CHANGELOG_FILE,
resourceAccessor, database)) {