From 293a8b71933b98c8cc08a23fc99524e3eb040adb Mon Sep 17 00:00:00 2001 From: "mingye.jmy" Date: Thu, 30 May 2024 12:55:05 +0800 Subject: [PATCH] fix CVE --- paimon-format/src/main/resources/META-INF/NOTICE | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/paimon-format/src/main/resources/META-INF/NOTICE b/paimon-format/src/main/resources/META-INF/NOTICE index dae8d5fec19a..1b19c36e66a2 100644 --- a/paimon-format/src/main/resources/META-INF/NOTICE +++ b/paimon-format/src/main/resources/META-INF/NOTICE @@ -17,7 +17,7 @@ This project bundles the following dependencies under the Apache Software Licens - com.fasterxml.jackson.core:jackson-core:2.14.2 - com.fasterxml.jackson.core:jackson-databind:2.14.2 - com.fasterxml.jackson.core:jackson-annotations:2.14.2 -- org.apache.commons:commons-compress:1.4.1 +- org.apache.commons:commons-compress:1.21 - org.apache.parquet:parquet-hadoop:1.13.1 - org.apache.parquet:parquet-column:1.13.1 @@ -31,6 +31,6 @@ This project bundles the following dependencies under the BSD license. You find it under licenses/LICENSE.protobuf, licenses/LICENSE.zstd-jni and licenses/LICENSE.threeten-extra -- com.google.protobuf:protobuf-java:3.17.3 +- com.google.protobuf:protobuf-java:3.19.6 - com.github.luben:zstd-jni:1.5.5-11 - org.threeten:threeten-extra:1.7.1