[HUDI-5344] Fix CVE - upgrade protobuf-java (apache#6960)

* Fixes https://www.oscs1024.com/hd/CVE-2015-5237 Co-authored-by: Sagar Sumit <sagarsumit09@gmail.com>
fengjian428 · Apr 5, 2023 · 0fe2900 · 0fe2900
1 parent 94ff928
commit 0fe2900
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/packaging/hudi-presto-bundle/pom.xml b/packaging/hudi-presto-bundle/pom.xml
@@ -301,7 +301,7 @@
     <dependency>
       <groupId>com.google.protobuf</groupId>
       <artifactId>protobuf-java</artifactId>
-      <version>3.18.2</version>
+      <version>${proto.version}</version>
       <scope>${presto.bundle.bootstrap.scope}</scope>
     </dependency>
 

diff --git a/packaging/hudi-trino-bundle/pom.xml b/packaging/hudi-trino-bundle/pom.xml
@@ -288,7 +288,7 @@
     <dependency>
       <groupId>com.google.protobuf</groupId>
       <artifactId>protobuf-java</artifactId>
-      <version>2.5.0</version>
+      <version>${proto.version}</version>
       <scope>${trino.bundle.bootstrap.scope}</scope>
     </dependency>