tool
/
starrocks
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[Enhancement] Fix broker CVEs (#57620) 

Signed-off-by: wyb <wybb86@gmail.com>
This commit is contained in:
wyb 2025-04-03 16:20:56 +08:00 committed by GitHub
parent c05b058f03
commit 707c441bd3
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 27 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
fs_brokers/apache_hdfs_broker/src/broker-core/pom.xml
View File

@ -133,6 +133,12 @@ under the License.
<dependency>
<groupId>org.apache.hadoop</groupId>
<artifactId>hadoop-common</artifactId>
<exclusions>
<exclusion>
<artifactId>avro</artifactId>
<groupId>org.apache.avro</groupId>
</exclusion>
</exclusions>
</dependency>
<dependency>
@ -158,6 +164,12 @@ under the License.
<artifactId>jackson-databind</artifactId>
</dependency>
<!-- https://mvnrepository.com/artifact/org.apache.avro/avro/ -->
<dependency>
<groupId>org.apache.avro</groupId>
<artifactId>avro</artifactId>
</dependency>
<!-- https://mvnrepository.com/artifact/junit/junit -->
<dependency>
<groupId>junit</groupId>

16
fs_brokers/apache_hdfs_broker/src/pom.xml
View File

@ -42,12 +42,13 @@ under the License.
<maven.compiler.target>1.8</maven.compiler.target>
<hadoop.version>3.4.0</hadoop.version>
<guava.version>32.0.1-jre</guava.version>
<zookeeper.version>3.9.2</zookeeper.version>
<zookeeper.version>3.9.3</zookeeper.version>
<protobuf.version>3.16.3</protobuf.version>
<thrift.version>0.14.1</thrift.version>
<tomcat.version>9.0.90</tomcat.version>
<log4j.version>2.17.1</log4j.version>
<jackson.version>2.13.4.2</jackson.version>
<avro.version>1.11.4</avro.version>
</properties>
<profiles>
@ -227,6 +228,12 @@ under the License.
<groupId>org.apache.hadoop</groupId>
<artifactId>hadoop-common</artifactId>
<version>${hadoop.version}</version>
<exclusions>
<exclusion>
<artifactId>avro</artifactId>
<groupId>org.apache.avro</groupId>
</exclusion>
</exclusions>
</dependency>
<dependency>
@ -262,6 +269,13 @@ under the License.
<version>${jackson.version}</version>
</dependency>
<!-- https://mvnrepository.com/artifact/org.apache.avro/avro/ -->
<dependency>
<groupId>org.apache.avro</groupId>
<artifactId>avro</artifactId>
<version>${avro.version}</version>
</dependency>
<!-- https://mvnrepository.com/artifact/junit/junit -->
<dependency>
<groupId>junit</groupId>