Akanksha-kedia opened a new pull request, #6751: URL: https://github.com/apache/hive/pull/6751
## What changes were proposed in this pull request? Bumps `org.postgresql:postgresql` from 42.7.3 to 42.7.12 in `pom.xml` and `standalone-metastore/pom.xml`. This supersedes #6599, which targeted 42.7.11 for the same CVE and stalled because the original author lacked ASF JIRA credentials to proceed. Picking it up here at a newer patch version per the discussion on that PR. ## Why are the changes needed? Addresses the CVE affecting `org.postgresql:postgresql` versions `>= 42.2.0, < 42.7.11` by moving to a later patched release. ## Does this PR introduce any user-facing change? No. ## How was this patch tested? Dependency version bump only; existing test suite covers usage. cc @deniskuzZ @uros-b @pranitatiwari-per -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
