You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@plc4x.apache.org by cd...@apache.org on 2022/03/08 14:33:46 UTC

[plc4x] branch develop updated: fix(plc4/integration/calcite): Managed the kotlin version up to 1.6.10 to work around CVE-2022-24329

This is an automated email from the ASF dual-hosted git repository.

cdutz pushed a commit to branch develop
in repository https://gitbox.apache.org/repos/asf/plc4x.git


The following commit(s) were added to refs/heads/develop by this push:
     new cb46fe2  fix(plc4/integration/calcite): Managed the kotlin version up to 1.6.10 to work around CVE-2022-24329
cb46fe2 is described below

commit cb46fe271d7ee1dc04d06f9a8f410a04202d5fed
Author: cdutz <ch...@c-ware.de>
AuthorDate: Tue Mar 8 15:32:31 2022 +0100

    fix(plc4/integration/calcite): Managed the kotlin version up to 1.6.10 to work around CVE-2022-24329
---
 plc4j/integrations/apache-calcite/pom.xml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/plc4j/integrations/apache-calcite/pom.xml b/plc4j/integrations/apache-calcite/pom.xml
index 12f2628..cc807dd 100644
--- a/plc4j/integrations/apache-calcite/pom.xml
+++ b/plc4j/integrations/apache-calcite/pom.xml
@@ -182,6 +182,22 @@
         <artifactId>accessors-smart</artifactId>
         <version>2.4.7</version>
       </dependency>
+      <!-- Update from 1.5.31 Because of CVE-2022-24329 -->
+      <dependency>
+        <groupId>org.jetbrains.kotlin</groupId>
+        <artifactId>kotlin-stdlib</artifactId>
+        <version>1.6.10</version>
+      </dependency>
+      <dependency>
+        <groupId>org.jetbrains.kotlin</groupId>
+        <artifactId>kotlin-stdlib-jdk7</artifactId>
+        <version>1.6.10</version>
+      </dependency>
+      <dependency>
+        <groupId>org.jetbrains.kotlin</groupId>
+        <artifactId>kotlin-stdlib-jdk8</artifactId>
+        <version>1.6.10</version>
+      </dependency>
     </dependencies>
   </dependencyManagement>