This is an automated email from the ASF dual-hosted git repository.

lhotari pushed a commit to branch branch-3.0
in repository https://gitbox.apache.org/repos/asf/pulsar.git

commit cea5409cde1c33f085fe28fd335574852913e45b
Author: Nikhil Erigila <[email protected]>
AuthorDate: Fri May 10 16:41:20 2024 +0530

    [fix][sec] Upgrade postgresql version to avoid CVE-2024-1597 (#22635)
    
    (cherry picked from commit 2cfd9597676828bae68c9dac74e41d65a1a29864)
---
 pom.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 4cfb70a620f..35378e72cda 100644
--- a/pom.xml
+++ b/pom.xml
@@ -188,7 +188,7 @@ flexible messaging model and an intuitive client 
API.</description>
     <guice.version>5.1.0</guice.version>
     <sqlite-jdbc.version>3.42.0.0</sqlite-jdbc.version>
     <mysql-jdbc.version>8.0.11</mysql-jdbc.version>
-    <postgresql-jdbc.version>42.5.1</postgresql-jdbc.version>
+    <postgresql-jdbc.version>42.5.5</postgresql-jdbc.version>
     <clickhouse-jdbc.version>0.4.6</clickhouse-jdbc.version>
     <mariadb-jdbc.version>2.7.5</mariadb-jdbc.version>
     <openmldb-jdbc.version>0.4.4-hotfix1</openmldb-jdbc.version>
@@ -198,7 +198,7 @@ flexible messaging model and an intuitive client 
API.</description>
     <elasticsearch-java.version>8.12.1</elasticsearch-java.version>
     <trino.version>368</trino.version>
     <debezium.version>1.9.7.Final</debezium.version>
-    <debezium.postgresql.version>42.5.0</debezium.postgresql.version>
+    <debezium.postgresql.version>42.5.5</debezium.postgresql.version>
     <debezium.mysql.version>8.0.30</debezium.mysql.version>
     <!-- Override version that brings CVE-2022-3143 with debezium -->
     <wildfly-elytron.version>1.15.16.Final</wildfly-elytron.version>

Reply via email to