Skip to content

Commit

Permalink
[Security] Upgrade protobuf to 3.16.1 to address CVE-2021-22569 (#13695)
Browse files Browse the repository at this point in the history
### Motivation

- protobuf < 3.16.1 contains DoS vulnerability CVE-2021-22569, https://nvd.nist.gov/vuln/detail/CVE-2021-22569.

### Modifications

- upgrade protobuf from 3.11.4 to 3.16.1
  • Loading branch information
lhotari committed Jan 11, 2022
1 parent afc241f commit 1a3688c
Show file tree
Hide file tree
Showing 3 changed files with 4 additions and 4 deletions.
4 changes: 2 additions & 2 deletions distribution/server/src/assemble/LICENSE.bin.txt
Expand Up @@ -548,8 +548,8 @@ MIT License

Protocol Buffers License
* Protocol Buffers
- com.google.protobuf-protobuf-java-3.11.4.jar -- licenses/LICENSE-protobuf.txt
- com.google.protobuf-protobuf-java-util-3.11.4.jar -- licenses/LICENSE-protobuf.txt
- com.google.protobuf-protobuf-java-3.16.1.jar -- licenses/LICENSE-protobuf.txt
- com.google.protobuf-protobuf-java-util-3.16.1.jar -- licenses/LICENSE-protobuf.txt

CDDL-1.1 -- licenses/LICENSE-CDDL-1.1.txt
* Java Annotations API
Expand Down
2 changes: 1 addition & 1 deletion pom.xml
Expand Up @@ -129,7 +129,7 @@ flexible messaging model and an intuitive client API.</description>
<puppycrawl.checkstyle.version>8.37</puppycrawl.checkstyle.version>
<dockerfile-maven.version>1.4.13</dockerfile-maven.version>
<typetools.version>0.5.0</typetools.version>
<protobuf3.version>3.11.4</protobuf3.version>
<protobuf3.version>3.16.1</protobuf3.version>
<protoc3.version>${protobuf3.version}</protoc3.version>
<grpc.version>1.33.0</grpc.version>
<perfmark.version>0.19.0</perfmark.version>
Expand Down
2 changes: 1 addition & 1 deletion pulsar-sql/presto-distribution/LICENSE
Expand Up @@ -460,7 +460,7 @@ The Apache Software License, Version 2.0

Protocol Buffers License
* Protocol Buffers
- protobuf-java-3.11.4.jar
- protobuf-java-3.16.1.jar

BSD 3-clause "New" or "Revised" License
* RE2J TD -- re2j-td-1.4.jar
Expand Down

0 comments on commit 1a3688c

Please sign in to comment.