This is an automated email from the ASF dual-hosted git repository.
penghui pushed a commit to branch branch-2.10
in repository https://gitbox.apache.org/repos/asf/pulsar.git
The following commit(s) were added to refs/heads/branch-2.10 by this push:
new 73462d65a26 [branch-2.10][fix][build] Upgrade swagger version to fix
CVE-2022-1471 (#20172)
73462d65a26 is described below
commit 73462d65a2657424363f7737bae50e4b7da9bc6e
Author: Jiwei Guo <[email protected]>
AuthorDate: Mon Apr 24 17:47:46 2023 +0800
[branch-2.10][fix][build] Upgrade swagger version to fix CVE-2022-1471
(#20172)
---
distribution/server/src/assemble/LICENSE.bin.txt | 6 +++---
pom.xml | 2 +-
pulsar-sql/presto-distribution/LICENSE | 2 +-
3 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/distribution/server/src/assemble/LICENSE.bin.txt
b/distribution/server/src/assemble/LICENSE.bin.txt
index 62e3439c97c..7ead9d790a8 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -334,9 +334,9 @@ The Apache Software License, Version 2.0
* J2ObjC Annotations -- com.google.j2objc-j2objc-annotations-1.3.jar
* Netty Reactive Streams --
com.typesafe.netty-netty-reactive-streams-2.0.6.jar
* Swagger
- - io.swagger-swagger-annotations-1.6.2.jar
- - io.swagger-swagger-core-1.6.2.jar
- - io.swagger-swagger-models-1.6.2.jar
+ - io.swagger-swagger-annotations-1.6.10.jar
+ - io.swagger-swagger-core-1.6.10.jar
+ - io.swagger-swagger-models-1.6.10.jar
* DataSketches
- com.yahoo.datasketches-memory-0.8.3.jar
- com.yahoo.datasketches-sketches-core-0.8.3.jar
diff --git a/pom.xml b/pom.xml
index 26eaa9c63d2..e1acfb6b74b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -126,7 +126,7 @@ flexible messaging model and an intuitive client
API.</description>
<bouncycastlefips.version>1.0.2</bouncycastlefips.version>
<jackson.version>2.14.2</jackson.version>
<reflections.version>0.9.11</reflections.version>
- <swagger.version>1.6.2</swagger.version>
+ <swagger.version>1.6.10</swagger.version>
<puppycrawl.checkstyle.version>8.37</puppycrawl.checkstyle.version>
<dockerfile-maven.version>1.4.13</dockerfile-maven.version>
<typetools.version>0.5.0</typetools.version>
diff --git a/pulsar-sql/presto-distribution/LICENSE
b/pulsar-sql/presto-distribution/LICENSE
index c285eff2b5d..4c59ab739e2 100644
--- a/pulsar-sql/presto-distribution/LICENSE
+++ b/pulsar-sql/presto-distribution/LICENSE
@@ -475,7 +475,7 @@ The Apache Software License, Version 2.0
* Apache Yetus Audience Annotations
- audience-annotations-0.5.0.jar
* Swagger
- - swagger-annotations-1.6.2.jar
+ - swagger-annotations-1.6.10.jar
* Perfmark
- perfmark-api-0.19.0.jar
* Annotations
