You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@calcite.apache.org by li...@apache.org on 2022/03/04 13:24:30 UTC
[calcite] 26/41: [CALCITE-5007] Upgrade H2 database version to 2.1.210
This is an automated email from the ASF dual-hosted git repository.
liyafan pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/calcite.git
commit 07edf272be60cf044b226639500f7ae6f92a53bc
Author: Stamatis Zampetakis <za...@gmail.com>
AuthorDate: Wed Feb 9 17:52:19 2022 +0100
[CALCITE-5007] Upgrade H2 database version to 2.1.210
The 1.4.197 version suffers from multiple CVEs such as:
https://nvd.nist.gov/vuln/detail/CVE-2018-14335
https://nvd.nist.gov/vuln/detail/CVE-2018-10054
https://nvd.nist.gov/vuln/detail/CVE-2021-42392
https://nvd.nist.gov/vuln/detail/CVE-2022-23221
In the project, we use H2 only for testing purposes thus the H2
binaries are not present in the runtime classpath thus these CVEs do
not pose a problem for Calcite or its users.
Close apache/calcite#2717
---
gradle.properties | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/gradle.properties b/gradle.properties
index e9e6485..740d73d 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -100,7 +100,7 @@ foodmart-data-json.version=0.4
foodmart-queries.version=0.4.1
geode-core.version=1.10.0
guava.version=29.0-jre
-h2.version=1.4.197
+h2.version=2.1.210
hadoop.version=2.7.5
hamcrest-date.version=2.0.4
hamcrest.version=2.1