You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@flink.apache.org by ma...@apache.org on 2022/04/19 16:41:48 UTC
[flink] branch release-1.15 updated: [FLINK-25694][Filesystem][S3] Upgrade Presto to resolve GSON/Alluxio Vulnerability. This closes #19479
This is an automated email from the ASF dual-hosted git repository.
martijnvisser pushed a commit to branch release-1.15
in repository https://gitbox.apache.org/repos/asf/flink.git
The following commit(s) were added to refs/heads/release-1.15 by this push:
new 229c5f05373 [FLINK-25694][Filesystem][S3] Upgrade Presto to resolve GSON/Alluxio Vulnerability. This closes #19479
229c5f05373 is described below
commit 229c5f053731f1af127971075ae8b052e6e48a83
Author: David N Perkins <Da...@ibm.com>
AuthorDate: Thu Apr 14 15:35:12 2022 -0400
[FLINK-25694][Filesystem][S3] Upgrade Presto to resolve GSON/Alluxio Vulnerability. This closes #19479
Signed-off-by: David N Perkins <Da...@ibm.com>
---
flink-filesystems/flink-s3-fs-presto/pom.xml | 2 +-
.../flink-s3-fs-presto/src/main/resources/META-INF/NOTICE | 11 ++++++-----
2 files changed, 7 insertions(+), 6 deletions(-)
diff --git a/flink-filesystems/flink-s3-fs-presto/pom.xml b/flink-filesystems/flink-s3-fs-presto/pom.xml
index 9a876559f65..618798c41c9 100644
--- a/flink-filesystems/flink-s3-fs-presto/pom.xml
+++ b/flink-filesystems/flink-s3-fs-presto/pom.xml
@@ -33,7 +33,7 @@ under the License.
<packaging>jar</packaging>
<properties>
- <presto.version>0.257</presto.version>
+ <presto.version>0.272</presto.version>
</properties>
<dependencies>
diff --git a/flink-filesystems/flink-s3-fs-presto/src/main/resources/META-INF/NOTICE b/flink-filesystems/flink-s3-fs-presto/src/main/resources/META-INF/NOTICE
index 037a9f881e3..ebcbf9a40f3 100644
--- a/flink-filesystems/flink-s3-fs-presto/src/main/resources/META-INF/NOTICE
+++ b/flink-filesystems/flink-s3-fs-presto/src/main/resources/META-INF/NOTICE
@@ -17,10 +17,10 @@ This project bundles the following dependencies under the Apache Software Licens
- com.amazonaws:aws-java-sdk-s3:1.11.951
- com.amazonaws:aws-java-sdk-sts:1.11.951
- com.amazonaws:jmespath-java:1.11.951
-- com.facebook.presto:presto-common:0.257
-- com.facebook.presto:presto-hive:0.257
-- com.facebook.presto:presto-hive-common:0.257
-- com.facebook.presto:presto-hive-metastore:0.257
+- com.facebook.presto:presto-common:0.272
+- com.facebook.presto:presto-hive:0.272
+- com.facebook.presto:presto-hive-common:0.272
+- com.facebook.presto:presto-hive-metastore:0.272
- com.facebook.presto.hadoop:hadoop-apache2:2.7.4-9
- com.fasterxml.jackson.core:jackson-annotations:2.13.2
- com.fasterxml.jackson.core:jackson-core:2.13.2
@@ -35,7 +35,7 @@ This project bundles the following dependencies under the Apache Software Licens
- io.airlift:units:1.3
- io.airlift:slice:0.38
- joda-time:joda-time:2.5
-- org.alluxio:alluxio-shaded-client:2.5.0-3
+- org.alluxio:alluxio-shaded-client:2.7.3
- org.apache.commons:commons-configuration2:2.1.1
- org.apache.commons:commons-lang3:3.3.2
- org.apache.commons:commons-text:1.4
@@ -46,6 +46,7 @@ This project bundles the following dependencies under the Apache Software Licens
- org.apache.htrace:htrace-core4:4.1.0-incubating
- org.apache.httpcomponents:httpclient:4.5.13
- org.apache.httpcomponents:httpcore:4.4.14
+- org.apache.hudi:hudi-presto-bundle:0.10.1
- org.weakref:jmxutils:1.19
- software.amazon.ion:ion-java:1.0.2