[HUDI-5344] Fix CVE - upgrade protobuf-java (apache#6960)

* Fixes https://www.oscs1024.com/hd/CVE-2015-5237 Co-authored-by: Sagar Sumit <sagarsumit09@gmail.com>
onehouseinc · Dec 14, 2022 · 6896877 · 6896877
1 parent 9a87bc4
commit 6896877
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/packaging/hudi-presto-bundle/pom.xml b/packaging/hudi-presto-bundle/pom.xml
@@ -300,7 +300,7 @@
     <dependency>
       <groupId>com.google.protobuf</groupId>
       <artifactId>protobuf-java</artifactId>
-      <version>3.18.2</version>
+      <version>${proto.version}</version>
       <scope>${presto.bundle.bootstrap.scope}</scope>
     </dependency>
 

diff --git a/packaging/hudi-trino-bundle/pom.xml b/packaging/hudi-trino-bundle/pom.xml
@@ -288,7 +288,7 @@
     <dependency>
       <groupId>com.google.protobuf</groupId>
       <artifactId>protobuf-java</artifactId>
-      <version>2.5.0</version>
+      <version>${proto.version}</version>
       <scope>${trino.bundle.bootstrap.scope}</scope>
     </dependency>