You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@doris.apache.org by ca...@apache.org on 2021/04/06 03:02:14 UTC
[incubator-doris] branch master updated: [FE][Bug] Update Spark
version to fix a security issue (#5593)
This is an automated email from the ASF dual-hosted git repository.
caiconghui pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/incubator-doris.git
The following commit(s) were added to refs/heads/master by this push:
new 18c2553 [FE][Bug] Update Spark version to fix a security issue (#5593)
18c2553 is described below
commit 18c2553ef88d1c879eba7fd4e016349169bff978
Author: zh0122 <zh...@gmail.com>
AuthorDate: Tue Apr 6 11:02:04 2021 +0800
[FE][Bug] Update Spark version to fix a security issue (#5593)
Fix CVE-2020-9480: Apache Spark RCE vulnerability in
auth-enabled standalone master
https://spark.apache.org/security.html#CVE-2020-9480
---
fe/pom.xml | 8 ++++----
fe/spark-dpp/pom.xml | 2 +-
2 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/fe/pom.xml b/fe/pom.xml
index bfbf887..24c949e 100644
--- a/fe/pom.xml
+++ b/fe/pom.xml
@@ -573,7 +573,7 @@ under the License.
<dependency>
<groupId>org.apache.spark</groupId>
<artifactId>spark-core_2.12</artifactId>
- <version>2.4.5</version>
+ <version>2.4.6</version>
<exclusions>
<exclusion>
<groupId>log4j</groupId>
@@ -590,14 +590,14 @@ under the License.
<dependency>
<groupId>org.apache.spark</groupId>
<artifactId>spark-launcher_2.12</artifactId>
- <version>2.4.5</version>
+ <version>2.4.6</version>
</dependency>
<!-- https://mvnrepository.com/artifact/org.apache.spark/spark-sql_2.12 -->
<dependency>
<groupId>org.apache.spark</groupId>
<artifactId>spark-sql_2.12</artifactId>
- <version>2.4.5</version>
+ <version>2.4.6</version>
<scope>provided</scope>
</dependency>
@@ -659,7 +659,7 @@ under the License.
<dependency>
<groupId>org.apache.spark</groupId>
<artifactId>spark-catalyst_2.12</artifactId>
- <version>2.4.5</version>
+ <version>2.4.6</version>
<scope>provided</scope>
</dependency>
diff --git a/fe/spark-dpp/pom.xml b/fe/spark-dpp/pom.xml
index 0a0a042..49bc831 100644
--- a/fe/spark-dpp/pom.xml
+++ b/fe/spark-dpp/pom.xml
@@ -157,7 +157,7 @@ under the License.
<dependency>
<groupId>org.apache.spark</groupId>
<artifactId>spark-catalyst_2.12</artifactId>
- <version>2.4.5</version>
+ <version>2.4.6</version>
<scope>provided</scope>
</dependency>
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@doris.apache.org
For additional commands, e-mail: commits-help@doris.apache.org