This is an automated email from the ASF dual-hosted git repository.
lhotari pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/pulsar.git
The following commit(s) were added to refs/heads/master by this push:
new 2cfd9597676 [fix][sec] Upgrade postgresql version to avoid
CVE-2024-1597 (#22635)
2cfd9597676 is described below
commit 2cfd9597676828bae68c9dac74e41d65a1a29864
Author: Nikhil Erigila <[email protected]>
AuthorDate: Fri May 10 16:41:20 2024 +0530
[fix][sec] Upgrade postgresql version to avoid CVE-2024-1597 (#22635)
---
pom.xml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/pom.xml b/pom.xml
index c2f563eb60e..63b44788f14 100644
--- a/pom.xml
+++ b/pom.xml
@@ -190,7 +190,7 @@ flexible messaging model and an intuitive client
API.</description>
<guice.version>5.1.0</guice.version>
<sqlite-jdbc.version>3.42.0.0</sqlite-jdbc.version>
<mysql-jdbc.version>8.0.11</mysql-jdbc.version>
- <postgresql-jdbc.version>42.5.1</postgresql-jdbc.version>
+ <postgresql-jdbc.version>42.5.5</postgresql-jdbc.version>
<clickhouse-jdbc.version>0.4.6</clickhouse-jdbc.version>
<mariadb-jdbc.version>2.7.5</mariadb-jdbc.version>
<openmldb-jdbc.version>0.4.4-hotfix1</openmldb-jdbc.version>
@@ -199,7 +199,7 @@ flexible messaging model and an intuitive client
API.</description>
<opensearch.version>1.2.4</opensearch.version>
<elasticsearch-java.version>8.12.1</elasticsearch-java.version>
<debezium.version>1.9.7.Final</debezium.version>
- <debezium.postgresql.version>42.5.0</debezium.postgresql.version>
+ <debezium.postgresql.version>42.5.5</debezium.postgresql.version>
<debezium.mysql.version>8.0.30</debezium.mysql.version>
<!-- Override version that brings CVE-2022-3143 with debezium -->
<wildfly-elytron.version>1.15.16.Final</wildfly-elytron.version>