0860553e18
### What changes were proposed in this pull request? upgrade protobuf from 3.19.2 to 3.21.7 reducing direct CVE vulnerabilities ### Why are the changes needed? The protobuf version has the follow CVE vulnerabilities, see https://scout.docker.com/vulnerabilities/id/CVE-2022-3510 https://scout.docker.com/vulnerabilities/id/CVE-2022-3509 https://scout.docker.com/vulnerabilities/id/CVE-2021-22570 https://scout.docker.com/vulnerabilities/id/CVE-2021-22569 ### Does this PR introduce _any_ user-facing change? No any user-facing change ### How was this patch tested? `./build/make-distribution.sh` to package and run test on the local. Closes #2142 from dev-lpq/upgrade_protobuf-java_version. Authored-by: pengqli <pengqli@cisco.com> Signed-off-by: zky.zhoukeyong <zky.zhoukeyong@alibaba-inc.com> |
||
|---|---|---|
| .. | ||
| deps | ||
| checkout_pr.sh | ||
| dependencies.sh | ||
| merge_pr.py | ||
| reformat | ||