This is an automated email from the ASF dual-hosted git repository.

laiyingchun pushed a commit to branch branch-1.17.x
in repository https://gitbox.apache.org/repos/asf/kudu.git

commit 5cc5e2029af6c375bb1b2aac8c1d25f400150ea6
Author: Alexey Serbin <[email protected]>
AuthorDate: Thu Jul 20 12:47:07 2023 -0700

    KUDU-3494 upgrade protobuf up to 3.21.12
    
    This is to address a vulnerability in protobuf 3.19.3 [1][2]
    
    [1] https://nvd.nist.gov/vuln/detail/CVE-2022-3509
    [2] https://nvd.nist.gov/vuln/detail/CVE-2022-3510
    
    Change-Id: I4a7c69e3eeae1afbddccb2867ecd40e04807a139
    Reviewed-on: http://gerrit.cloudera.org:8080/20233
    Tested-by: Kudu Jenkins
    Reviewed-by: Yingchun Lai <[email protected]>
    (cherry picked from commit 68009e8ab4c685ac90309ed010301ca97d961a83)
    Reviewed-on: http://gerrit.cloudera.org:8080/20241
    Tested-by: Yingchun Lai <[email protected]>
---
 java/gradle/dependencies.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/gradle/dependencies.gradle b/java/gradle/dependencies.gradle
index 62753c27a..2b4f7f3eb 100755
--- a/java/gradle/dependencies.gradle
+++ b/java/gradle/dependencies.gradle
@@ -51,7 +51,7 @@ versions += [
     murmur         : "1.0.0",
     netty          : "4.1.94.Final",
     osdetector     : "1.6.2",
-    protobuf       : "3.19.3",
+    protobuf       : "3.21.12",
     ranger         : "2.1.0",
     scala211       : "2.11.12",
     scala          : "2.12.15",

Reply via email to