apache/celeborn
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
9f8a6bcb79
celeborn/dev/deps/dependencies-server
pengqli a808c252ba
[CELEBORN-1184] Update the snakeyaml version from 1.33 to 2.2 
### What changes were proposed in this pull request?
Update the snakeyaml version from 1.33 to 2.2 reducing direct CVE vulnerabilities.

### Why are the changes needed?
The snakeyaml version has the follow CVE vulnerabilities, see
https://scout.docker.com/vulnerabilities/id/CVE-2022-1471

### Does this PR introduce _any_ user-facing change?
No any user-facing change

### How was this patch tested?
./build/make-distribution.sh to package and run test on the local.

Closes #2170 from dev-lpq/snakeyaml_version.

Authored-by: pengqli <pengqli@cisco.com>
Signed-off-by: Cheng Pan <chengpan@apache.org>
2023-12-20 21:23:22 +08:00

101 lines
5.6 KiB
Plaintext
Raw Blame History

#
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements. See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to You under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License. You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
RoaringBitmap/0.9.32//RoaringBitmap-0.9.32.jar
commons-cli/1.5.0//commons-cli-1.5.0.jar
commons-crypto/1.0.0//commons-crypto-1.0.0.jar
commons-io/2.13.0//commons-io-2.13.0.jar
commons-lang3/3.12.0//commons-lang3-3.12.0.jar
commons-logging/1.1.3//commons-logging-1.1.3.jar
failureaccess/1.0.1//failureaccess-1.0.1.jar
guava/32.1.3-jre//guava-32.1.3-jre.jar
hadoop-client-api/3.3.6//hadoop-client-api-3.3.6.jar
hadoop-client-runtime/3.3.6//hadoop-client-runtime-3.3.6.jar
jackson-annotations/2.15.3//jackson-annotations-2.15.3.jar
jackson-core/2.15.3//jackson-core-2.15.3.jar
jackson-databind/2.15.3//jackson-databind-2.15.3.jar
jackson-module-scala_2.12/2.15.3//jackson-module-scala_2.12-2.15.3.jar
javassist/3.28.0-GA//javassist-3.28.0-GA.jar
javax.servlet-api/3.1.0//javax.servlet-api-3.1.0.jar
jcl-over-slf4j/1.7.36//jcl-over-slf4j-1.7.36.jar
jsr305/1.3.9//jsr305-1.3.9.jar
jul-to-slf4j/1.7.36//jul-to-slf4j-1.7.36.jar
leveldbjni-all/1.8//leveldbjni-all-1.8.jar
log4j-1.2-api/2.17.2//log4j-1.2-api-2.17.2.jar
log4j-api/2.17.2//log4j-api-2.17.2.jar
log4j-core/2.17.2//log4j-core-2.17.2.jar
log4j-slf4j-impl/2.17.2//log4j-slf4j-impl-2.17.2.jar
lz4-java/1.8.0//lz4-java-1.8.0.jar
maven-jdk-tools-wrapper/0.1//maven-jdk-tools-wrapper-0.1.jar
metrics-core/3.2.6//metrics-core-3.2.6.jar
metrics-graphite/3.2.6//metrics-graphite-3.2.6.jar
metrics-jvm/3.2.6//metrics-jvm-3.2.6.jar
netty-all/4.1.101.Final//netty-all-4.1.101.Final.jar
netty-buffer/4.1.101.Final//netty-buffer-4.1.101.Final.jar
netty-codec-dns/4.1.101.Final//netty-codec-dns-4.1.101.Final.jar
netty-codec-haproxy/4.1.101.Final//netty-codec-haproxy-4.1.101.Final.jar
netty-codec-http/4.1.101.Final//netty-codec-http-4.1.101.Final.jar
netty-codec-http2/4.1.101.Final//netty-codec-http2-4.1.101.Final.jar
netty-codec-memcache/4.1.101.Final//netty-codec-memcache-4.1.101.Final.jar
netty-codec-mqtt/4.1.101.Final//netty-codec-mqtt-4.1.101.Final.jar
netty-codec-redis/4.1.101.Final//netty-codec-redis-4.1.101.Final.jar
netty-codec-smtp/4.1.101.Final//netty-codec-smtp-4.1.101.Final.jar
netty-codec-socks/4.1.101.Final//netty-codec-socks-4.1.101.Final.jar
netty-codec-stomp/4.1.101.Final//netty-codec-stomp-4.1.101.Final.jar
netty-codec-xml/4.1.101.Final//netty-codec-xml-4.1.101.Final.jar
netty-codec/4.1.101.Final//netty-codec-4.1.101.Final.jar
netty-common/4.1.101.Final//netty-common-4.1.101.Final.jar
netty-handler-proxy/4.1.101.Final//netty-handler-proxy-4.1.101.Final.jar
netty-handler/4.1.101.Final//netty-handler-4.1.101.Final.jar
netty-resolver-dns-classes-macos/4.1.101.Final//netty-resolver-dns-classes-macos-4.1.101.Final.jar
netty-resolver-dns-native-macos/4.1.101.Final/osx-aarch_64/netty-resolver-dns-native-macos-4.1.101.Final-osx-aarch_64.jar
netty-resolver-dns-native-macos/4.1.101.Final/osx-x86_64/netty-resolver-dns-native-macos-4.1.101.Final-osx-x86_64.jar
netty-resolver-dns/4.1.101.Final//netty-resolver-dns-4.1.101.Final.jar
netty-resolver/4.1.101.Final//netty-resolver-4.1.101.Final.jar
netty-transport-classes-epoll/4.1.101.Final//netty-transport-classes-epoll-4.1.101.Final.jar
netty-transport-classes-kqueue/4.1.101.Final//netty-transport-classes-kqueue-4.1.101.Final.jar
netty-transport-native-epoll/4.1.101.Final/linux-aarch_64/netty-transport-native-epoll-4.1.101.Final-linux-aarch_64.jar
netty-transport-native-epoll/4.1.101.Final/linux-x86_64/netty-transport-native-epoll-4.1.101.Final-linux-x86_64.jar
netty-transport-native-kqueue/4.1.101.Final/osx-aarch_64/netty-transport-native-kqueue-4.1.101.Final-osx-aarch_64.jar
netty-transport-native-kqueue/4.1.101.Final/osx-x86_64/netty-transport-native-kqueue-4.1.101.Final-osx-x86_64.jar
netty-transport-native-unix-common/4.1.101.Final//netty-transport-native-unix-common-4.1.101.Final.jar
netty-transport-rxtx/4.1.101.Final//netty-transport-rxtx-4.1.101.Final.jar
netty-transport-sctp/4.1.101.Final//netty-transport-sctp-4.1.101.Final.jar
netty-transport-udt/4.1.101.Final//netty-transport-udt-4.1.101.Final.jar
netty-transport/4.1.101.Final//netty-transport-4.1.101.Final.jar
paranamer/2.8//paranamer-2.8.jar
protobuf-java/3.21.7//protobuf-java-3.21.7.jar
ratis-client/2.5.1//ratis-client-2.5.1.jar
ratis-common/2.5.1//ratis-common-2.5.1.jar
ratis-grpc/2.5.1//ratis-grpc-2.5.1.jar
ratis-metrics/2.5.1//ratis-metrics-2.5.1.jar
ratis-netty/2.5.1//ratis-netty-2.5.1.jar
ratis-proto/2.5.1//ratis-proto-2.5.1.jar
ratis-server-api/2.5.1//ratis-server-api-2.5.1.jar
ratis-server/2.5.1//ratis-server-2.5.1.jar
ratis-shell/2.5.1//ratis-shell-2.5.1.jar
ratis-thirdparty-misc/1.0.4//ratis-thirdparty-misc-1.0.4.jar
reflections/0.10.2//reflections-0.10.2.jar
rocksdbjni/8.5.3//rocksdbjni-8.5.3.jar
scala-library/2.12.15//scala-library-2.12.15.jar
scala-reflect/2.12.15//scala-reflect-2.12.15.jar
shims/0.9.32//shims-0.9.32.jar
slf4j-api/1.7.36//slf4j-api-1.7.36.jar
snakeyaml/2.2//snakeyaml-2.2.jar
snappy-java/1.1.10.5//snappy-java-1.1.10.5.jar
zstd-jni/1.5.2-1//zstd-jni-1.5.2-1.jar
Reference in New Issue View Git Blame Copy Permalink