nicoloboschi opened a new pull request #14910:
URL: https://github.com/apache/pulsar/pull/14910


   ### Motivation
   PostGRE < 42.3.2 contains a critical vulnerability with a 9.8 score 
   https://nvd.nist.gov/vuln/detail/CVE-2022-26520
   
   ### Modifications
   
   Upgrade JDBC and Debezium connectors to use pg driver 42.3.3
   Pulsar is using 42.2.x, such as debezium. In debezium project they upgraded 
to 42.3 branch without [any code 
changes](https://github.com/debezium/debezium/pull/3110). This is a hint that 
there should not be issues upgrading.
   
   
   The bump of the minor version is related to [java 
compatibility](https://jdbc.postgresql.org/documentation/changelog.html#version_42.3.0)
 - not a problem for Pulsar. 
   
   - [x] `no-need-doc` 
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to