You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@kudu.apache.org by la...@apache.org on 2023/07/21 04:13:33 UTC

[kudu] branch master updated (4d0a65402 -> b7b9c058c)

This is an automated email from the ASF dual-hosted git repository.

laiyingchun pushed a change to branch master
in repository https://gitbox.apache.org/repos/asf/kudu.git


    from 4d0a65402 KUDU-1945 Update default range partition key
     new 68009e8ab KUDU-3494 upgrade protobuf up to 3.21.12
     new b7b9c058c KUDU-3492 upgrade Netty to 4.1.98.Final

The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Summary of changes:
 java/gradle/dependencies.gradle | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

[kudu] 01/02: KUDU-3494 upgrade protobuf up to 3.21.12

Posted by la...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

laiyingchun pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/kudu.git

commit 68009e8ab4c685ac90309ed010301ca97d961a83
Author: Alexey Serbin <al...@apache.org>
AuthorDate: Thu Jul 20 12:47:07 2023 -0700

    KUDU-3494 upgrade protobuf up to 3.21.12
    
    This is to address a vulnerability in protobuf 3.19.3 [1][2]
    
    [1] https://nvd.nist.gov/vuln/detail/CVE-2022-3509
    [2] https://nvd.nist.gov/vuln/detail/CVE-2022-3510
    
    Change-Id: I4a7c69e3eeae1afbddccb2867ecd40e04807a139
    Reviewed-on: http://gerrit.cloudera.org:8080/20233
    Tested-by: Kudu Jenkins
    Reviewed-by: Yingchun Lai <la...@apache.org>
---
 java/gradle/dependencies.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/gradle/dependencies.gradle b/java/gradle/dependencies.gradle
index 066659ee2..6cf04d41e 100755
--- a/java/gradle/dependencies.gradle
+++ b/java/gradle/dependencies.gradle
@@ -51,7 +51,7 @@ versions += [
     murmur         : "1.0.0",
     netty          : "4.1.84.Final",
     osdetector     : "1.6.2",
-    protobuf       : "3.19.3",
+    protobuf       : "3.21.12",
     ranger         : "2.1.0",
     scala211       : "2.11.12",
     scala          : "2.12.15",

[kudu] 02/02: KUDU-3492 upgrade Netty to 4.1.98.Final

Posted by la...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

laiyingchun pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/kudu.git

commit b7b9c058c877092c8168fae9316d69554b5499b9
Author: Alexey Serbin <al...@apache.org>
AuthorDate: Thu Jul 20 14:42:01 2023 -0700

    KUDU-3492 upgrade Netty to 4.1.98.Final
    
    This is to address a couple of vulnerabilities reported in Netty
    4.1.94.Final [1][2].
    
    [1] https://nvd.nist.gov/vuln/detail/CVE-2022-41881
    [2] https://nvd.nist.gov/vuln/detail/CVE-2023-34462
    
    Change-Id: I20c5c1d9260b1089cc2713fcf8559eb80c2c67c4
    Reviewed-on: http://gerrit.cloudera.org:8080/20236
    Tested-by: Alexey Serbin <al...@apache.org>
    Reviewed-by: Yifan Zhang <ch...@163.com>
---
 java/gradle/dependencies.gradle | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/java/gradle/dependencies.gradle b/java/gradle/dependencies.gradle
index 6cf04d41e..2b4f7f3eb 100755
--- a/java/gradle/dependencies.gradle
+++ b/java/gradle/dependencies.gradle
@@ -49,7 +49,7 @@ versions += [
     micrometer     : "1.8.2",
     mockito        : "4.2.0",
     murmur         : "1.0.0",
-    netty          : "4.1.84.Final",
+    netty          : "4.1.94.Final",
     osdetector     : "1.6.2",
     protobuf       : "3.21.12",
     ranger         : "2.1.0",