This is an automated email from the ASF dual-hosted git repository.
technoboy pushed a commit to branch branch-3.1
in repository https://gitbox.apache.org/repos/asf/pulsar.git
The following commit(s) were added to refs/heads/branch-3.1 by this push:
new d02ae45a714 [fix][misc] Bump GRPC version to 1.55.3 to fix CVE (#21057)
d02ae45a714 is described below
commit d02ae45a714d63c75866994714eb48436b324736
Author: Qiang Zhao <[email protected]>
AuthorDate: Tue Aug 29 19:15:03 2023 +0800
[fix][misc] Bump GRPC version to 1.55.3 to fix CVE (#21057)
---
distribution/server/src/assemble/LICENSE.bin.txt | 38 +++++++++++++-----------
pom.xml | 4 +--
pulsar-sql/presto-distribution/LICENSE | 20 ++++++-------
3 files changed, 32 insertions(+), 30 deletions(-)
diff --git a/distribution/server/src/assemble/LICENSE.bin.txt
b/distribution/server/src/assemble/LICENSE.bin.txt
index 3bbb5183b0f..09af8e3fc61 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -259,7 +259,7 @@ The Apache Software License, Version 2.0
- com.fasterxml.jackson.module-jackson-module-parameter-names-2.14.2.jar
* Caffeine -- com.github.ben-manes.caffeine-caffeine-2.9.1.jar
* Conscrypt -- org.conscrypt-conscrypt-openjdk-uber-2.5.2.jar
- * Proto Google Common Protos --
com.google.api.grpc-proto-google-common-protos-2.0.1.jar
+ * Proto Google Common Protos --
com.google.api.grpc-proto-google-common-protos-2.9.0.jar
* Bitbucket -- org.bitbucket.b_c-jose4j-0.9.3.jar
* Gson
- com.google.code.gson-gson-2.8.9.jar
@@ -418,23 +418,25 @@ The Apache Software License, Version 2.0
- org.jetbrains.kotlin-kotlin-stdlib-jdk8-1.8.20.jar
- org.jetbrains-annotations-13.0.jar
* gRPC
- - io.grpc-grpc-all-1.45.1.jar
- - io.grpc-grpc-auth-1.45.1.jar
- - io.grpc-grpc-context-1.45.1.jar
- - io.grpc-grpc-core-1.45.1.jar
- - io.grpc-grpc-netty-1.45.1.jar
- - io.grpc-grpc-protobuf-1.45.1.jar
- - io.grpc-grpc-protobuf-lite-1.45.1.jar
- - io.grpc-grpc-stub-1.45.1.jar
- - io.grpc-grpc-alts-1.45.1.jar
- - io.grpc-grpc-api-1.45.1.jar
- - io.grpc-grpc-grpclb-1.45.1.jar
- - io.grpc-grpc-netty-shaded-1.45.1.jar
- - io.grpc-grpc-services-1.45.1.jar
- - io.grpc-grpc-xds-1.45.1.jar
- - io.grpc-grpc-rls-1.45.1.jar
+ - io.grpc-grpc-all-1.55.3.jar
+ - io.grpc-grpc-auth-1.55.3.jar
+ - io.grpc-grpc-context-1.55.3.jar
+ - io.grpc-grpc-core-1.55.3.jar
+ - io.grpc-grpc-netty-1.55.3.jar
+ - io.grpc-grpc-protobuf-1.55.3.jar
+ - io.grpc-grpc-protobuf-lite-1.55.3.jar
+ - io.grpc-grpc-stub-1.55.3.jar
+ - io.grpc-grpc-alts-1.55.3.jar
+ - io.grpc-grpc-api-1.55.3.jar
+ - io.grpc-grpc-grpclb-1.55.3.jar
+ - io.grpc-grpc-netty-shaded-1.55.3.jar
+ - io.grpc-grpc-services-1.55.3.jar
+ - io.grpc-grpc-xds-1.55.3.jar
+ - io.grpc-grpc-rls-1.55.3.jar
+ - io.grpc-grpc-servlet-1.55.3.jar
+ - io.grpc-grpc-servlet-jakarta-1.55.3.jar
* Perfmark
- - io.perfmark-perfmark-api-0.19.0.jar
+ - io.perfmark-perfmark-api-0.26.0.jar
* OpenCensus
- io.opencensus-opencensus-api-0.28.0.jar
- io.opencensus-opencensus-contrib-http-util-0.28.0.jar
@@ -485,7 +487,7 @@ The Apache Software License, Version 2.0
- com.google.http-client-google-http-client-gson-1.41.0.jar
- com.google.http-client-google-http-client-1.41.0.jar
- com.google.auto.value-auto-value-annotations-1.9.jar
- - com.google.re2j-re2j-1.5.jar
+ - com.google.re2j-re2j-1.6.jar
* Jetcd
- io.etcd-jetcd-api-0.7.5.jar
- io.etcd-jetcd-common-0.7.5.jar
diff --git a/pom.xml b/pom.xml
index a5e0b9bf5b2..7fd1bb69af9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -164,9 +164,9 @@ flexible messaging model and an intuitive client
API.</description>
<typetools.version>0.5.0</typetools.version>
<protobuf3.version>3.19.6</protobuf3.version>
<protoc3.version>${protobuf3.version}</protoc3.version>
- <grpc.version>1.45.1</grpc.version>
+ <grpc.version>1.55.3</grpc.version>
<google-http-client.version>1.41.0</google-http-client.version>
- <perfmark.version>0.19.0</perfmark.version>
+ <perfmark.version>0.26.0</perfmark.version>
<protoc-gen-grpc-java.version>${grpc.version}</protoc-gen-grpc-java.version>
<gson.version>2.8.9</gson.version>
<system-lambda.version>1.2.1</system-lambda.version>
diff --git a/pulsar-sql/presto-distribution/LICENSE
b/pulsar-sql/presto-distribution/LICENSE
index 9afd6c98bc2..738ef83abff 100644
--- a/pulsar-sql/presto-distribution/LICENSE
+++ b/pulsar-sql/presto-distribution/LICENSE
@@ -263,14 +263,14 @@ The Apache Software License, Version 2.0
- netty-incubator-transport-native-io_uring-0.0.21.Final-linux-x86_64.jar
- netty-incubator-transport-native-io_uring-0.0.21.Final-linux-aarch_64.jar
* GRPC
- - grpc-api-1.45.1.jar
- - grpc-context-1.45.1.jar
- - grpc-core-1.45.1.jar
- - grpc-grpclb-1.45.1.jar
- - grpc-netty-1.45.1.jar
- - grpc-protobuf-1.45.1.jar
- - grpc-protobuf-lite-1.45.1.jar
- - grpc-stub-1.45.1.jar
+ - grpc-api-1.55.3.jar
+ - grpc-context-1.55.3.jar
+ - grpc-core-1.55.3.jar
+ - grpc-grpclb-1.55.3.jar
+ - grpc-netty-1.55.3.jar
+ - grpc-protobuf-1.55.3.jar
+ - grpc-protobuf-lite-1.55.3.jar
+ - grpc-stub-1.55.3.jar
* JEtcd
- jetcd-api-0.7.5.jar
- jetcd-common-0.7.5.jar
@@ -477,7 +477,7 @@ The Apache Software License, Version 2.0
* Apache Yetus Audience Annotations
- audience-annotations-0.12.0.jar
* Perfmark
- - perfmark-api-0.19.0.jar
+ - perfmark-api-0.26.0.jar
* RabbitMQ Java Client
- amqp-client-5.5.3.jar
* Stream Lib
@@ -490,7 +490,7 @@ Protocol Buffers License
* Protocol Buffers
- protobuf-java-3.19.6.jar
- protobuf-java-util-3.19.6.jar
- - proto-google-common-protos-2.0.1.jar
+ - proto-google-common-protos-2.9.0.jar
BSD 3-clause "New" or "Revised" License
* RE2J TD -- re2j-td-1.4.jar
