This is an automated email from the ASF dual-hosted git repository.

penghui pushed a commit to branch branch-2.8
in repository https://gitbox.apache.org/repos/asf/pulsar.git

commit 444d2a3b49e803326c56bfaff7a461f13bd6ed4a
Author: Andrey Yegorov <[email protected]>
AuthorDate: Wed Jan 19 23:51:57 2022 -0800

    Getting rid of CVEs in batch-data-generator (#13820)
    
    CVE-2021-41269
    CVE-2021-22060
    CVE-2021-22096
    CVE-2021-22118
    
    (cherry picked from commit 5a33d106dd282fa85008888a687c94203f888df7)
---
 pom.xml                                | 4 ++--
 pulsar-io/batch-data-generator/pom.xml | 6 ++++++
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 08b40df..1075d57 100644
--- a/pom.xml
+++ b/pom.xml
@@ -192,8 +192,8 @@ flexible messaging model and an intuitive client 
API.</description>
     <jna.version>4.2.0</jna.version>
     <kubernetesclient.version>12.0.1</kubernetesclient.version>
     <nsq-client.version>1.0</nsq-client.version>
-    <cron-utils.version>9.1.3</cron-utils.version>
-    <spring-context.version>5.3.1</spring-context.version>
+    <cron-utils.version>9.1.6</cron-utils.version>
+    <spring-context.version>5.3.15</spring-context.version>
     <apache-http-client.version>4.5.13</apache-http-client.version>
 
     <!-- test dependencies -->
diff --git a/pulsar-io/batch-data-generator/pom.xml 
b/pulsar-io/batch-data-generator/pom.xml
index cdc1706..fe0b72e 100644
--- a/pulsar-io/batch-data-generator/pom.xml
+++ b/pulsar-io/batch-data-generator/pom.xml
@@ -45,6 +45,12 @@
         </dependency>
 
         <dependency>
+            <groupId>org.springframework</groupId>
+            <artifactId>spring-context</artifactId>
+            <version>${spring-context.version}</version>
+        </dependency>
+
+        <dependency>
             <groupId>io.codearte.jfairy</groupId>
             <artifactId>jfairy</artifactId>
             <version>0.5.9</version>

Reply via email to