Skip to content

Commit

Permalink
Fix comments
Browse files Browse the repository at this point in the history
  • Loading branch information
Shmuma committed Sep 28, 2023
1 parent 7a08c2c commit 7b62a76
Show file tree
Hide file tree
Showing 3 changed files with 5 additions and 4 deletions.
1 change: 1 addition & 0 deletions .gitattributes
Original file line number Diff line number Diff line change
Expand Up @@ -11,3 +11,4 @@ doc/changes/changelog.md linguist-genera
.github/workflows/release_droid_prepare_original_checksum.yml linguist-generated=true
.github/workflows/release_droid_print_quick_checksum.yml linguist-generated=true
.github/workflows/release_droid_upload_github_release_assets.yml linguist-generated=true
.github/workflows/release_droid_release_on_maven_central.yml linguist-generated=true
4 changes: 2 additions & 2 deletions doc/changes/changes_2.0.2.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,11 +4,11 @@ Code name: Update dependencies to fix CVEs

## Summary

Update transitive dependencies to fix CVE-2023-42503, CVE-2023-43642, CVE-2022-46751 and CVE-2022-46751
Update transitive dependencies to fix CVE-2023-42503, CVE-2023-43642, CVE-2022-46751 and CVE-2022-46751.

## Security

* 23: Update deps to fix CVE-2023-42503, CVE-2023-43642, CVE-2022-46751 and CVE-2022-46751
* #23: Updated deps to fix CVE-2023-42503, CVE-2023-43642, CVE-2022-46751 and CVE-2022-46751

## Dependency Updates

Expand Down
4 changes: 2 additions & 2 deletions pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -71,13 +71,13 @@
<version>1.24.0</version>
</dependency>
<dependency>
<!-- Upgrade transitive dependency of org.xerial.snappy:snappy-java to fix CVE-2023-43642 and CVE-2022-46751 -->
<!-- Upgrade transitive dependency of org.apache.spark:spark-core_2.13 to fix CVE-2023-43642 and CVE-2022-46751 -->
<groupId>org.xerial.snappy</groupId>
<artifactId>snappy-java</artifactId>
<version>1.1.10.5</version>
</dependency>
<dependency>
<!-- Upgrade transitive dependency of org.apache.ivy:ivy to fix CVE-2022-46751 -->
<!-- Upgrade transitive dependency of org.apache.spark:spark-core_2.13 to fix CVE-2022-46751 -->
<groupId>org.apache.ivy</groupId>
<artifactId>ivy</artifactId>
<version>2.5.2</version>
Expand Down

0 comments on commit 7b62a76

Please sign in to comment.