This is an automated email from the ASF dual-hosted git repository.

xiangfu pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/pinot.git


The following commit(s) were added to refs/heads/master by this push:
     new 2e84561985 fixing CVE critical issues by resolving kerby/jline and 
wildfly libraries (#12566)
2e84561985 is described below

commit 2e845619852cc5a81de4395e15a12f38d9046fab
Author: Xiang Fu <[email protected]>
AuthorDate: Tue Mar 5 23:43:28 2024 -0800

    fixing CVE critical issues by resolving kerby/jline and wildfly libraries 
(#12566)
---
 pom.xml | 31 +++++++++++++++++++++++++++++++
 1 file changed, 31 insertions(+)

diff --git a/pom.xml b/pom.xml
index ae357419a7..53f50f6afc 100644
--- a/pom.xml
+++ b/pom.xml
@@ -198,6 +198,9 @@
 
     <kotlin.stdlib.version>1.9.22</kotlin.stdlib.version>
     <okio.version>3.8.0</okio.version>
+    <kerby.version>2.0.3</kerby.version>
+    <jline.version>3.22.0</jline.version>
+    <wildfly.version>1.5.4.Final</wildfly.version>
   </properties>
 
   <profiles>
@@ -845,6 +848,10 @@
             <groupId>commons-logging</groupId>
             <artifactId>commons-logging</artifactId>
           </exclusion>
+          <exclusion>
+            <groupId>io.netty</groupId>
+            <artifactId>netty</artifactId>
+          </exclusion>
         </exclusions>
       </dependency>
       <dependency>
@@ -925,6 +932,10 @@
             <groupId>commons-logging</groupId>
             <artifactId>commons-logging</artifactId>
           </exclusion>
+          <exclusion>
+            <groupId>io.netty</groupId>
+            <artifactId>netty</artifactId>
+          </exclusion>
         </exclusions>
       </dependency>
       <dependency>
@@ -945,6 +956,26 @@
         <artifactId>jaxb-api</artifactId>
         <version>2.3.1</version>
       </dependency>
+      <dependency>
+        <groupId>org.apache.kerby</groupId>
+        <artifactId>kerb-core</artifactId>
+        <version>${kerby.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.apache.kerby</groupId>
+        <artifactId>kerb-simplekdc</artifactId>
+        <version>${kerby.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.jline</groupId>
+        <artifactId>jline</artifactId>
+        <version>${jline.version}</version>
+      </dependency>
+      <dependency>
+        <groupId>org.wildfly.common</groupId>
+        <artifactId>wildfly-common</artifactId>
+        <version>${wildfly.version}</version>
+      </dependency>
 
       <!-- Metrics -->
       <dependency>


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to