Stamatis Zampetakis created CALCITE-5007:
--------------------------------------------
Summary: Upgrade H2 database version to 2.1.210
Key: CALCITE-5007
URL: https://issues.apache.org/jira/browse/CALCITE-5007
Project: Calcite
Issue Type: Task
Reporter: Stamatis Zampetakis
Assignee: Stamatis Zampetakis
Fix For: 1.30.0
The 1.4.197 version suffers from
https://nvd.nist.gov/vuln/detail/CVE-2018-10054.
In the project, we use H2 only for testing purposes thus the H2 binaries are
not present in the runtime classpath thus CVE-2018-10054 does not pose a
problem for Calcite or its users. Nevertheless, it would be good to upgrade to
a more recent version to avoid Calcite coming up in vulnerability scans due to
this.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
