This is an automated email from the ASF dual-hosted git repository.
luchunliang pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/inlong.git
The following commit(s) were added to refs/heads/master by this push:
new 1ca48c6995 [INLONG-9640][CVE] Bump Apache Shiro to 1.13.0 (#9641)
1ca48c6995 is described below
commit 1ca48c6995dd06ce98d09c57acfd62485ed351e7
Author: Charles Zhang <[email protected]>
AuthorDate: Thu Feb 1 16:49:43 2024 +0800
[INLONG-9640][CVE] Bump Apache Shiro to 1.13.0 (#9641)
---
licenses/inlong-agent/LICENSE | 2 +-
licenses/inlong-manager/LICENSE | 22 +++++++++++-----------
pom.xml | 2 +-
3 files changed, 13 insertions(+), 13 deletions(-)
diff --git a/licenses/inlong-agent/LICENSE b/licenses/inlong-agent/LICENSE
index f52f6a0ca5..eaa0e36ba2 100644
--- a/licenses/inlong-agent/LICENSE
+++ b/licenses/inlong-agent/LICENSE
@@ -443,7 +443,7 @@ The text of each license is the standard Apache 2.0 license.
org.apache.velocity:velocity-engine-core:2.3 - Apache Velocity - Engine
(https://github.com/apache/velocity-engine/tree/2.3/velocity-engine-core),
(Apache License, Version 2.0)
org.apache.zookeeper:zookeeper:3.7.2 - Apache ZooKeeper - Server
(https://github.com/apache/zookeeper/tree/release-3.7.2/zookeeper-server),
(Apache License, Version 2.0)
org.apache.zookeeper:zookeeper-jute:3.7.2 - Apache ZooKeeper - Jute
(https://github.com/apache/zookeeper/tree/release-3.7.2/zookeeper-jute),
(Apache License, Version 2.0)
- org.apache.shiro:shiro-core:1.10.1 - Apache Shiro Cache
(https://shiro.apache.org/), (Apache License, Version 2.0)
+ org.apache.shiro:shiro-core:1.13.0 - Apache Shiro Cache
(https://shiro.apache.org/), (Apache License, Version 2.0)
========================================================================
Apache 2.0 licenses
diff --git a/licenses/inlong-manager/LICENSE b/licenses/inlong-manager/LICENSE
index edb6179c5c..061856f3aa 100644
--- a/licenses/inlong-manager/LICENSE
+++ b/licenses/inlong-manager/LICENSE
@@ -528,17 +528,17 @@ The text of each license is the standard Apache 2.0
license.
org.elasticsearch.plugin:rank-eval-client:6.8.23 - rank-eval
(https://github.com/elastic/elasticsearch), (The Apache Software License,
Version 2.0)
org.reflections:reflections:0.10.2 - Reflections
(https://github.com/ronmamo/reflections/tree/0.10.2), (The Apache Software
License, Version 2.0; WTFPL)
com.squareup.retrofit2:retrofit:2.9.0 - Retrofit
(https://github.com/square/retrofit) (Apache License, Version 2.0)
- org.apache.shiro:shiro-cache:1.10.1 - Apache Shiro Cache
(https://shiro.apache.org/caching.html), (Apache License, Version 2.0)
- org.apache.shiro:shiro-config-core:1.10.1 - Apache Shiro :: Config :: Core
(https://shiro.apache.org/), (Apache License, Version 2.0)
- org.apache.shiro:shiro-config-ogdl:1.10.1 - Apache Shiro :: Config :: Ogdl
(https://shiro.apache.org/), (Apache License, Version 2.0)
- org.apache.shiro:shiro-core:1.10.1 - Apache Shiro Cache
(https://shiro.apache.org/), (Apache License, Version 2.0)
- org.apache.shiro:shiro-crypto-hash:1.10.1 - Apache Shiro :: Cryptography ::
Hashing (https://shiro.apache.org/), (Apache License, Version 2.0)
- org.apache.shiro:shiro-crypto-core:1.10.1 - Apache Shiro :: Cryptography ::
Core (https://shiro.apache.org/), (Apache License, Version 2.0)
- org.apache.shiro:shiro-crypto-cipher:1.10.1 - Apache Shiro :: Cryptography
:: Ciphers (https://shiro.apache.org/), (Apache License, Version 2.0)
- org.apache.shiro:shiro-event:1.10.1 - Apache Shiro :: Event
(https://shiro.apache.org/), (Apache License, Version 2.0)
- org.apache.shiro:shiro-web:1.10.1 - Apache Shiro :: Web
(https://shiro.apache.org/), (Apache License, Version 2.0)
- org.apache.shiro:shiro-lang:1.10.1 - Apache Shiro :: Lang
(https://shiro.apache.org/), (Apache License, Version 2.0)
- org.apache.shiro:shiro-spring:1.10.1 - Apache Shiro :: Support :: Spring
(https://shiro.apache.org/), (Apache License, Version 2.0)
+ org.apache.shiro:shiro-cache:1.13.0 - Apache Shiro Cache
(https://shiro.apache.org/caching.html), (Apache License, Version 2.0)
+ org.apache.shiro:shiro-config-core:1.13.0 - Apache Shiro :: Config :: Core
(https://shiro.apache.org/), (Apache License, Version 2.0)
+ org.apache.shiro:shiro-config-ogdl:1.13.0 - Apache Shiro :: Config :: Ogdl
(https://shiro.apache.org/), (Apache License, Version 2.0)
+ org.apache.shiro:shiro-core:1.13.0 - Apache Shiro Cache
(https://shiro.apache.org/), (Apache License, Version 2.0)
+ org.apache.shiro:shiro-crypto-hash:1.13.0 - Apache Shiro :: Cryptography ::
Hashing (https://shiro.apache.org/), (Apache License, Version 2.0)
+ org.apache.shiro:shiro-crypto-core:1.13.0 - Apache Shiro :: Cryptography ::
Core (https://shiro.apache.org/), (Apache License, Version 2.0)
+ org.apache.shiro:shiro-crypto-cipher:1.13.0 - Apache Shiro :: Cryptography
:: Ciphers (https://shiro.apache.org/), (Apache License, Version 2.0)
+ org.apache.shiro:shiro-event:1.13.0 - Apache Shiro :: Event
(https://shiro.apache.org/), (Apache License, Version 2.0)
+ org.apache.shiro:shiro-web:1.13.0 - Apache Shiro :: Web
(https://shiro.apache.org/), (Apache License, Version 2.0)
+ org.apache.shiro:shiro-lang:1.13.0 - Apache Shiro :: Lang
(https://shiro.apache.org/), (Apache License, Version 2.0)
+ org.apache.shiro:shiro-spring:1.13.0 - Apache Shiro :: Support :: Spring
(https://shiro.apache.org/), (Apache License, Version 2.0)
io.prometheus:simpleclient:0.14.1 - Prometheus Java Simpleclient
(https://github.com/prometheus/client_java/tree/parent-0.14.1), (The Apache
Software License, Version 2.0)
io.prometheus:simpleclient_common:0.14.1 - Prometheus Java Simpleclient
Common (https://github.com/prometheus/client_java/tree/parent-0.14.1), (The
Apache Software License, Version 2.0)
io.prometheus:simpleclient_httpserver:0.14.1 - Prometheus Java Simpleclient
Httpserver (https://github.com/prometheus/client_java/tree/parent-0.14.1), (The
Apache Software License, Version 2.0)
diff --git a/pom.xml b/pom.xml
index 9d1b084143..5e4ab08066 100644
--- a/pom.xml
+++ b/pom.xml
@@ -110,7 +110,7 @@
<druid.version>1.2.6</druid.version>
<elasticsearch6.version>6.8.17</elasticsearch6.version>
<elasticsearch7.version>7.9.2</elasticsearch7.version>
- <shiro.version>1.10.1</shiro.version>
+ <shiro.version>1.13.0</shiro.version>
<snappy.version>1.1.10.4</snappy.version>
<protobuf.version>3.19.6</protobuf.version>
