Julian Hyde created CALCITE-5232:
------------------------------------
Summary: Upgrade protobuf-java from 3.17.1 to 3.21.5
Key: CALCITE-5232
URL: https://issues.apache.org/jira/browse/CALCITE-5232
Project: Calcite
Issue Type: Bug
Reporter: Julian Hyde
Upgrade protobuf-java in Calcite and Avatica.
Some scanning tools say that the current version, 3.17.1, is affected by
[CVE-2021-22569|https://nvd.nist.gov/vuln/detail/CVE-2021-22569]. It is not,
but this upgrade makes those warnings go away.
As for CALCITE-4626, we plan to upgrade both Avatica and Calcite, to keep them
on the same protobuf-java version.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
