This is an automated email from the ASF dual-hosted git repository. adoroszlai pushed a commit to branch branch-3.3.5 in repository https://gitbox.apache.org/repos/asf/hadoop.git
The following commit(s) were added to refs/heads/branch-3.3.5 by this push: new 2cc1896d447 HADOOP-18484. Upgrade hsqldb to v2.7.1 to mitigate CVE-2022-41853 (#5114) 2cc1896d447 is described below commit 2cc1896d44724f798f7a7806314c37bbdcd21401 Author: Ashutosh Gupta <ashutosh.gu...@st.niituniversity.in> AuthorDate: Wed Nov 16 10:42:43 2022 +0000 HADOOP-18484. Upgrade hsqldb to v2.7.1 to mitigate CVE-2022-41853 (#5114) --- LICENSE-binary | 2 +- .../hadoop-mapreduce-client/hadoop-mapreduce-client-jobclient/pom.xml | 1 + hadoop-mapreduce-project/hadoop-mapreduce-examples/pom.xml | 1 + hadoop-mapreduce-project/pom.xml | 1 + hadoop-project/pom.xml | 3 ++- .../hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-common/pom.xml | 1 + 6 files changed, 7 insertions(+), 2 deletions(-) diff --git a/LICENSE-binary b/LICENSE-binary index a12f21666b8..e8d8f4440b0 100644 --- a/LICENSE-binary +++ b/LICENSE-binary @@ -492,7 +492,7 @@ jakarta.xml.bind:jakarta.xml.bind-api:2.3.2 HSQL License ------------ -org.hsqldb:hsqldb:2.3.4 +org.hsqldb:hsqldb:2.7.1 JDOM License diff --git a/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-jobclient/pom.xml b/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-jobclient/pom.xml index 3f147d12984..6ce234b001a 100644 --- a/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-jobclient/pom.xml +++ b/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-jobclient/pom.xml @@ -104,6 +104,7 @@ <groupId>org.hsqldb</groupId> <artifactId>hsqldb</artifactId> <scope>test</scope> + <classifier>jdk8</classifier> </dependency> <!-- 'mvn dependency:analyze' fails to detect use of this dependency --> <dependency> diff --git a/hadoop-mapreduce-project/hadoop-mapreduce-examples/pom.xml b/hadoop-mapreduce-project/hadoop-mapreduce-examples/pom.xml index 1478cb1885d..93bbd2ecf6e 100644 --- a/hadoop-mapreduce-project/hadoop-mapreduce-examples/pom.xml +++ b/hadoop-mapreduce-project/hadoop-mapreduce-examples/pom.xml @@ -106,6 +106,7 @@ <groupId>org.hsqldb</groupId> <artifactId>hsqldb</artifactId> <scope>provided</scope> + <classifier>jdk8</classifier> </dependency> <dependency> <groupId>org.apache.hadoop.thirdparty</groupId> diff --git a/hadoop-mapreduce-project/pom.xml b/hadoop-mapreduce-project/pom.xml index 882a3eab8da..7c2bc2444b3 100644 --- a/hadoop-mapreduce-project/pom.xml +++ b/hadoop-mapreduce-project/pom.xml @@ -142,6 +142,7 @@ <groupId>org.hsqldb</groupId> <artifactId>hsqldb</artifactId> <scope>compile</scope> + <classifier>jdk8</classifier> </dependency> <dependency> <groupId>${leveldbjni.group}</groupId> diff --git a/hadoop-project/pom.xml b/hadoop-project/pom.xml index fd1743d919c..0ceb935f5f6 100644 --- a/hadoop-project/pom.xml +++ b/hadoop-project/pom.xml @@ -187,7 +187,7 @@ <make-maven-plugin.version>1.0-beta-1</make-maven-plugin.version> <surefire.fork.timeout>900</surefire.fork.timeout> <aws-java-sdk.version>1.12.316</aws-java-sdk.version> - <hsqldb.version>2.3.4</hsqldb.version> + <hsqldb.version>2.7.1</hsqldb.version> <frontend-maven-plugin.version>1.11.2</frontend-maven-plugin.version> <jasmine-maven-plugin.version>2.1</jasmine-maven-plugin.version> <phantomjs-maven-plugin.version>0.7</phantomjs-maven-plugin.version> @@ -1475,6 +1475,7 @@ <groupId>org.hsqldb</groupId> <artifactId>hsqldb</artifactId> <version>${hsqldb.version}</version> + <classifier>jdk8</classifier> </dependency> <dependency> <groupId>io.dropwizard.metrics</groupId> diff --git a/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-common/pom.xml b/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-common/pom.xml index b6fd161f0e8..932557806d6 100644 --- a/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-common/pom.xml +++ b/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-common/pom.xml @@ -129,6 +129,7 @@ <groupId>org.hsqldb</groupId> <artifactId>hsqldb</artifactId> <scope>test</scope> + <classifier>jdk8</classifier> </dependency> <dependency> <groupId>com.microsoft.sqlserver</groupId> --------------------------------------------------------------------- To unsubscribe, e-mail: common-commits-unsubscr...@hadoop.apache.org For additional commands, e-mail: common-commits-h...@hadoop.apache.org