You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@skywalking.apache.org by wu...@apache.org on 2024/02/24 04:11:05 UTC
(skywalking) branch master updated: Upgrade PostgreSQL driver to `42.4.4` to fix CVE-2024-1597. (#11922)
This is an automated email from the ASF dual-hosted git repository.
wusheng pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/skywalking.git
The following commit(s) were added to refs/heads/master by this push:
new 6b49098aed Upgrade PostgreSQL driver to `42.4.4` to fix CVE-2024-1597. (#11922)
6b49098aed is described below
commit 6b49098aed66680025e50b8b18419e2b02423c46
Author: 吴晟 Wu Sheng <wu...@foxmail.com>
AuthorDate: Sat Feb 24 12:10:59 2024 +0800
Upgrade PostgreSQL driver to `42.4.4` to fix CVE-2024-1597. (#11922)
---
dist-material/release-docs/LICENSE | 2 +-
docs/en/changes/changes.md | 1 +
oap-server-bom/pom.xml | 2 +-
3 files changed, 3 insertions(+), 2 deletions(-)
diff --git a/dist-material/release-docs/LICENSE b/dist-material/release-docs/LICENSE
index d8392908fe..76dc93c148 100644
--- a/dist-material/release-docs/LICENSE
+++ b/dist-material/release-docs/LICENSE
@@ -378,7 +378,7 @@ BSD-2-Clause licenses
The following components are provided under the BSD-2-Clause License. See project link for details.
The text of each license is also included in licenses/LICENSE-[project].txt.
- https://mvnrepository.com/artifact/org.postgresql/postgresql/42.4.1 BSD-2-Clause
+ https://mvnrepository.com/artifact/org.postgresql/postgresql/42.4.4 BSD-2-Clause
========================================================================
BSD-3-Clause licenses
diff --git a/docs/en/changes/changes.md b/docs/en/changes/changes.md
index 70b71e3775..48183b2548 100644
--- a/docs/en/changes/changes.md
+++ b/docs/en/changes/changes.md
@@ -5,6 +5,7 @@
* Support oap-java21 image for Java 21 runtime.
* Upgrade `OTEL collector` version to `0.92.0` in all e2e tests.
* Switch CI macOS runner to m1.
+* Upgrade PostgreSQL driver to `42.4.4` to fix CVE-2024-1597.
#### OAP Server
diff --git a/oap-server-bom/pom.xml b/oap-server-bom/pom.xml
index 1f7b73ef4e..f58d52b157 100644
--- a/oap-server-bom/pom.xml
+++ b/oap-server-bom/pom.xml
@@ -65,7 +65,7 @@
<mvel.version>2.4.8.Final</mvel.version>
<commons-beanutils.version>1.9.4</commons-beanutils.version>
<flatbuffers-java.version>1.12.0</flatbuffers-java.version>
- <postgresql.version>42.4.1</postgresql.version>
+ <postgresql.version>42.4.4</postgresql.version>
<jetcd.version>0.5.3</jetcd.version>
<testcontainers.version>1.17.6</testcontainers.version>
<armeria.version>1.25.0</armeria.version>