You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@amoro.apache.org by "turboFei (via GitHub)" <gi...@apache.org> on 2025/11/04 20:07:33 UTC
[PR] Bump derby version to 10.14.3.0 to fix CVE-2022-46337 [amoro]
turboFei opened a new pull request, #3893:
URL: https://github.com/apache/amoro/pull/3893
<!--
Thanks for sending a pull request!
Here are some tips for you:
1. If this is your first time, please read our contributor guidelines: https://amoro.apache.org/how-to-contribute/
2. If the PR is related to an issue in https://github.com/apache/amoro/issues, add '[AMORO-XXXX]' in your PR title, e.g., '[AMORO-XXXX] Your PR title ...'.
3. If the PR is unfinished, add '[WIP]' in your PR title, e.g., '[WIP][AMORO-XXXX] Your PR title ...'.
-->
## Why are the changes needed?
<!--
Please clarify why the changes are needed. For instance,
1. If you add a feature, you can talk about its use case.
2. If you fix a bug, you can clarify why it is a bug.
3. Use Fix/Resolve/Close #{ISSUE_NUMBER} to link this PR to its related issue
-->
Close #xxx.
## Brief change log
<!--
Clearly describe the changes made in modules, classes, methods, etc.
-->
-
## How was this patch tested?
- [ ] Add some test cases that check the changes thoroughly including negative and positive cases if possible
- [ ] Add screenshots for manual tests if appropriate
- [ ] Run test locally before making a pull request
## Documentation
- Does this pull request introduce a new feature? (yes / no)
- If yes, how is the feature documented? (not applicable / docs / JavaDocs / not documented)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@amoro.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [AMORO-3894] Bump derby version to 10.14.3.0 to fix CVE-2022-46337 [amoro]
Posted by "turboFei (via GitHub)" <gi...@apache.org>.
turboFei commented on PR #3893:
URL: https://github.com/apache/amoro/pull/3893#issuecomment-3489355959
Ok, seems difficult to support.
<img width="921" height="313" alt="image" src="https://github.com/user-attachments/assets/bb90b6d8-fcf1-4599-a21f-4cb501ef5c13" />
I think we can make migration to other embedded database for Local/Testing.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@amoro.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [AMORO-3894] Bump derby version to 10.14.3.0 to fix CVE-2022-46337 [amoro]
Posted by "xxubai (via GitHub)" <gi...@apache.org>.
xxubai commented on code in PR #3893:
URL: https://github.com/apache/amoro/pull/3893#discussion_r2492589066
##########
pom.xml:
##########
@@ -134,7 +134,7 @@
<snakeyaml.version>2.2</snakeyaml.version>
<mybatis.version>3.5.15</mybatis.version>
<postgres-jdbc.version>42.7.2</postgres-jdbc.version>
- <derby-jdbc.version>10.14.2.0</derby-jdbc.version>
+ <derby-jdbc.version>10.14.3.0</derby-jdbc.version>
Review Comment:
Try to repleace it with latest version `10.17.1.0`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@amoro.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [AMORO-3894] Bump derby version to 10.14.3.0 to fix CVE-2022-46337 [amoro]
Posted by "turboFei (via GitHub)" <gi...@apache.org>.
turboFei closed pull request #3893: [AMORO-3894] Bump derby version to 10.14.3.0 to fix CVE-2022-46337
URL: https://github.com/apache/amoro/pull/3893
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@amoro.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [AMORO-3894] Bump derby version to 10.14.3.0 to fix CVE-2022-46337 [amoro]
Posted by "turboFei (via GitHub)" <gi...@apache.org>.
turboFei closed pull request #3893: [AMORO-3894] Bump derby version to 10.14.3.0 to fix CVE-2022-46337
URL: https://github.com/apache/amoro/pull/3893
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@amoro.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org