[jira] [Commented] (SPARK-38291) Upgrade postgresql from 42.3.0 to 42.3.3

["Apache Spark (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SPARK-38291?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17496219#comment-17496219 ] 

Apache Spark commented on SPARK-38291:
--------------------------------------

User 'bjornjorgensen' has created a pull request for this issue:
https://github.com/apache/spark/pull/35614

> Upgrade postgresql from 42.3.0 to 42.3.3
> ----------------------------------------
>
>                 Key: SPARK-38291
>                 URL: https://issues.apache.org/jira/browse/SPARK-38291
>             Project: Spark
>          Issue Type: Bug
>          Components: Build
>    Affects Versions: 3.3.0
>            Reporter: Bjørn Jørgensen
>            Priority: Major
>
> postgresql 42.3.0 have two security issues.  
> [CVE-2022-21724|https://nvd.nist.gov/vuln/detail/CVE-2022-21724] 
> and 
> [Arbitrary File Write Vulnerability|https://github.com/advisories/GHSA-673j-qm5f-xpv8]
> By upgrading postgresql from 42.3.0 to 42.3.3 we will resolve this issues. 



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org