Skip to content

Commit d616b9b

Browse files
[Enhancement] Adding exclusions for libraries to fix CVEs (backport StarRocks#50283) (StarRocks#50968)
Co-authored-by: Vikas Attiguppa <[email protected]>
1 parent 9b69a4d commit d616b9b

File tree

2 files changed

+5
-1
lines changed
  • contrib/trino-connector
  • fs_brokers/apache_hdfs_broker/src/hadoop-cos-shaded

2 files changed

+5
-1
lines changed

contrib/trino-connector/pom.xml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,10 @@
3838
<groupId>com.alibaba</groupId>
3939
<artifactId>fastjson</artifactId>
4040
</exclusion>
41+
<exclusion>
42+
<groupId>org.eclipse.jetty.http2</groupId>
43+
<artifactId>http2-common</artifactId>
44+
</exclusion>
4145
</exclusions>
4246
</dependency>
4347

fs_brokers/apache_hdfs_broker/src/hadoop-cos-shaded/pom.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ under the License.
4343
<dependency>
4444
<groupId>com.qcloud.cos</groupId>
4545
<artifactId>hadoop-cos</artifactId>
46-
<version>3.3.0-8.3.7</version>
46+
<version>3.3.3-8.3.10</version>
4747
</dependency>
4848

4949
<!-- https://mvnrepository.com/artifact/com.qcloud/cos_api-bundle -->

0 commit comments

Comments
 (0)