You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tez.apache.org by ab...@apache.org on 2023/02/24 12:39:25 UTC

[tez] branch master updated: Upgrade jettison to 1.5.3 to fix CVE-2022-45685, CVE-2022-45693 (#271) (Bilwa S T reviewed by Laszlo Bodor)

This is an automated email from the ASF dual-hosted git repository.

abstractdog pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/tez.git


The following commit(s) were added to refs/heads/master by this push:
     new fa51a590c Upgrade jettison to 1.5.3 to fix CVE-2022-45685, CVE-2022-45693 (#271) (Bilwa S T reviewed by Laszlo Bodor)
fa51a590c is described below

commit fa51a590ca6cdbb007cf4f500f9598a279eb6387
Author: BilwaST <Bi...@apache.org>
AuthorDate: Fri Feb 24 18:09:19 2023 +0530

    Upgrade jettison to 1.5.3 to fix CVE-2022-45685, CVE-2022-45693 (#271) (Bilwa S T reviewed by Laszlo Bodor)
---
 pom.xml                                                              | 2 +-
 tez-dag/src/main/java/org/apache/tez/dag/history/utils/DAGUtils.java | 5 +++--
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/pom.xml b/pom.xml
index 5a1aba89a..589c4ac83 100644
--- a/pom.xml
+++ b/pom.xml
@@ -739,7 +739,7 @@
       <dependency>
         <groupId>org.codehaus.jettison</groupId>
         <artifactId>jettison</artifactId>
-        <version>1.5.1</version>
+        <version>1.5.3</version>
       </dependency>
       <dependency>
         <groupId>com.google.code.findbugs</groupId>
diff --git a/tez-dag/src/main/java/org/apache/tez/dag/history/utils/DAGUtils.java b/tez-dag/src/main/java/org/apache/tez/dag/history/utils/DAGUtils.java
index 77e7179c2..4c45e7410 100644
--- a/tez-dag/src/main/java/org/apache/tez/dag/history/utils/DAGUtils.java
+++ b/tez-dag/src/main/java/org/apache/tez/dag/history/utils/DAGUtils.java
@@ -111,7 +111,8 @@ public final class DAGUtils {
     return dagJson;
   }
   
-  public static JSONObject convertDataEventDependencyInfoToJSON(List<DataEventDependencyInfo> info) {
+  public static JSONObject convertDataEventDependencyInfoToJSON(List<DataEventDependencyInfo> info)
+      throws JSONException {
     return new JSONObject(convertDataEventDependecyInfoToATS(info));
   }
   
@@ -436,7 +437,7 @@ public final class DAGUtils {
   }
 
   public static JSONObject convertServicePluginToJSON(
-      ServicePluginInfo servicePluginInfo) {
+      ServicePluginInfo servicePluginInfo) throws JSONException {
     JSONObject jsonObject = new JSONObject(convertServicePluginToATSMap(servicePluginInfo));
     return jsonObject;
   }