This is an automated email from the ASF dual-hosted git repository. zjffdu pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/zeppelin.git
The following commit(s) were added to refs/heads/master by this push: new be13f03 upgrade commons-compress and commons-io due to security concerns (#4315) be13f03 is described below commit be13f03f537a314657246d8aff719aed6691acd0 Author: PJ Fanning <pjfann...@users.noreply.github.com> AuthorDate: Thu Mar 17 09:53:42 2022 +0100 upgrade commons-compress and commons-io due to security concerns (#4315) --- pom.xml | 4 ++-- zeppelin-distribution/src/bin_license/LICENSE | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/pom.xml b/pom.xml index a8dee84..33541f4 100644 --- a/pom.xml +++ b/pom.xml @@ -130,13 +130,13 @@ <httpcomponents.core.version>4.4.1</httpcomponents.core.version> <httpcomponents.client.version>4.5.13</httpcomponents.client.version> <httpcomponents.asyncclient.version>4.0.2</httpcomponents.asyncclient.version> - <commons.compress.version>1.20</commons.compress.version> + <commons.compress.version>1.21</commons.compress.version> <commons.lang3.version>3.10</commons.lang3.version> <commons.text.version>1.8</commons.text.version> <commons.configuration2.version>2.7</commons.configuration2.version> <commons.exec.version>1.3</commons.exec.version> <commons.codec.version>1.14</commons.codec.version> - <commons.io.version>2.6</commons.io.version> + <commons.io.version>2.7</commons.io.version> <commons.collections.version>3.2.2</commons.collections.version> <commons.cli.version>1.4</commons.cli.version> <shiro.version>1.7.0</shiro.version> diff --git a/zeppelin-distribution/src/bin_license/LICENSE b/zeppelin-distribution/src/bin_license/LICENSE index c956727..583b8c0 100644 --- a/zeppelin-distribution/src/bin_license/LICENSE +++ b/zeppelin-distribution/src/bin_license/LICENSE @@ -6,8 +6,8 @@ The following components are provided under Apache License. (Apache 2.0) JavaEWAH v0.7.9 (https://github.com/lemire/javaewah) - https://github.com/lemire/javaewah/blob/master/LICENSE-2.0.txt (Apache 2.0) Apache Commons Logging (commons-logging:commons-logging:1.1.1 - http://commons.apache.org/proper/commons-logging/) (Apache 2.0) Apache Commons Codec (commons-codec:commons-codec:1.5 - http://commons.apache.org/proper/commons-codec/) - (Apache 2.0) Apache Commons Collections (commons-collections:commons-collections:3.2.1 - http://commons.apache.org/proper/commons-configuration/) - (Apache 2.0) Apache Commons Compress (org.apache.commons:commons-compress:1.9 - http://commons.apache.org/proper/commons-compress/) + (Apache 2.0) Apache Commons Collections (commons-collections:commons-collections:3.2.2 - http://commons.apache.org/proper/commons-configuration/) + (Apache 2.0) Apache Commons Compress (org.apache.commons:commons-compress:1.21 - http://commons.apache.org/proper/commons-compress/) (Apache 2.0) Apache Commons Configuration (org.apache.commons:commons-configuration2:2.7 - http://commons.apache.org/configuration/) (Apache 2.0) Apache Commons CLI (commons-cli:commons-cli:1.2 - http://commons.apache.org/cli/) (Apache 2.0) Apache Commons Exec (commons-exec:commons-exec:1.3 - http://commons.apache.org/exec/) @@ -20,7 +20,7 @@ The following components are provided under Apache License. (Apache 2.0) Apache Commons Net (commons-net:commons-net:2.2 - http://commons.apache.org/proper/commons-net/) (Apache 2.0) Apache Commons Pool2 (commons-exec:commons-pool2:2.3 - https://commons.apache.org/proper/commons-pool/) (Apache 2.0) Apache Commons FileUpload (commons-fileupload:commons-fileupload:1.3.1 - http://commons.apache.org/fileupload/) - (Apache 2.0) Apache Commons IO (commons-io:commons-io:2.4 - http://commons.apache.org/io/) + (Apache 2.0) Apache Commons IO (commons-io:commons-io:2.7 - http://commons.apache.org/io/) (Apache 2.0) Apache Commons VFS2 (org.apache.commons:commons-vfs2:2.0 - https://commons.apache.org/proper/commons-vfs/) (Apache 2.0) Apache Jackrabbit webdav (org.apache.jackrabbit:jackrabbit-webdav:jar:1.5.2 - https://jackrabbit.apache.org/jcr/components/jackrabbit-webdav-library.html) (Apache 2.0) Apache Jackrabbit JCR commons - http://jackrabbit.apache.org/jcr/components/jackrabbit-jcr-commons.html)