You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@skywalking.apache.org by wu...@apache.org on 2024/02/23 15:58:33 UTC
(skywalking) branch cve created (now 4736238c39)
This is an automated email from the ASF dual-hosted git repository.
wusheng pushed a change to branch cve
in repository https://gitbox.apache.org/repos/asf/skywalking.git
at 4736238c39 Upgrade PostgreSQL driver to `42.4.4` to fix CVE-2024-1597.
This branch includes the following new commits:
new 4736238c39 Upgrade PostgreSQL driver to `42.4.4` to fix CVE-2024-1597.
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
(skywalking) 01/01: Upgrade PostgreSQL driver to `42.4.4` to fix CVE-2024-1597.
Posted by wu...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
wusheng pushed a commit to branch cve
in repository https://gitbox.apache.org/repos/asf/skywalking.git
commit 4736238c39ce738f33e77a88f5382c4278eb4d6b
Author: Wu Sheng <wu...@foxmail.com>
AuthorDate: Fri Feb 23 23:58:25 2024 +0800
Upgrade PostgreSQL driver to `42.4.4` to fix CVE-2024-1597.
---
dist-material/release-docs/LICENSE | 2 +-
docs/en/changes/changes.md | 1 +
oap-server-bom/pom.xml | 2 +-
3 files changed, 3 insertions(+), 2 deletions(-)
diff --git a/dist-material/release-docs/LICENSE b/dist-material/release-docs/LICENSE
index d8392908fe..76dc93c148 100644
--- a/dist-material/release-docs/LICENSE
+++ b/dist-material/release-docs/LICENSE
@@ -378,7 +378,7 @@ BSD-2-Clause licenses
The following components are provided under the BSD-2-Clause License. See project link for details.
The text of each license is also included in licenses/LICENSE-[project].txt.
- https://mvnrepository.com/artifact/org.postgresql/postgresql/42.4.1 BSD-2-Clause
+ https://mvnrepository.com/artifact/org.postgresql/postgresql/42.4.4 BSD-2-Clause
========================================================================
BSD-3-Clause licenses
diff --git a/docs/en/changes/changes.md b/docs/en/changes/changes.md
index 70b71e3775..48183b2548 100644
--- a/docs/en/changes/changes.md
+++ b/docs/en/changes/changes.md
@@ -5,6 +5,7 @@
* Support oap-java21 image for Java 21 runtime.
* Upgrade `OTEL collector` version to `0.92.0` in all e2e tests.
* Switch CI macOS runner to m1.
+* Upgrade PostgreSQL driver to `42.4.4` to fix CVE-2024-1597.
#### OAP Server
diff --git a/oap-server-bom/pom.xml b/oap-server-bom/pom.xml
index 1f7b73ef4e..f58d52b157 100644
--- a/oap-server-bom/pom.xml
+++ b/oap-server-bom/pom.xml
@@ -65,7 +65,7 @@
<mvel.version>2.4.8.Final</mvel.version>
<commons-beanutils.version>1.9.4</commons-beanutils.version>
<flatbuffers-java.version>1.12.0</flatbuffers-java.version>
- <postgresql.version>42.4.1</postgresql.version>
+ <postgresql.version>42.4.4</postgresql.version>
<jetcd.version>0.5.3</jetcd.version>
<testcontainers.version>1.17.6</testcontainers.version>
<armeria.version>1.25.0</armeria.version>