Skip to content

Commit 736964e

Browse files
bjornjorgensendongjoon-hyun
authored andcommitted
[SPARK-41030][BUILD][3.2] Upgrade Apache Ivy to 2.5.1
### What changes were proposed in this pull request? Upgrade `Apache Ivy` from 2.5.0 to 2.5.1 [Release notes](https://ant.apache.org/ivy/history/2.5.1/release-notes.html) ### Why are the changes needed? [CVE-2022-37865](https://nvd.nist.gov/vuln/detail/CVE-2022-37865) This is a [9.1 CRITICAL](https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?name=CVE-2022-37865&vector=AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H&version=3.1&source=NIST) and [CVE-2022-37866](https://nvd.nist.gov/vuln/detail/CVE-2022-37866) ### Does this PR introduce _any_ user-facing change? No. ### How was this patch tested? Pass GA Closes #39371 from bjornjorgensen/ivy.version_2.5.1. Lead-authored-by: Bjørn Jørgensen <[email protected]> Co-authored-by: Bjørn <[email protected]> Signed-off-by: Dongjoon Hyun <[email protected]>
1 parent 63722c3 commit 736964e

3 files changed

Lines changed: 3 additions & 3 deletions

File tree

dev/deps/spark-deps-hadoop-2.7-hive-2.3

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -105,7 +105,7 @@ htrace-core/3.1.0-incubating//htrace-core-3.1.0-incubating.jar
105105
httpclient/4.5.13//httpclient-4.5.13.jar
106106
httpcore/4.4.14//httpcore-4.4.14.jar
107107
istack-commons-runtime/3.0.8//istack-commons-runtime-3.0.8.jar
108-
ivy/2.5.0//ivy-2.5.0.jar
108+
ivy/2.5.1//ivy-2.5.1.jar
109109
jackson-annotations/2.12.3//jackson-annotations-2.12.3.jar
110110
jackson-core-asl/1.9.13//jackson-core-asl-1.9.13.jar
111111
jackson-core/2.12.3//jackson-core-2.12.3.jar

dev/deps/spark-deps-hadoop-3.2-hive-2.3

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -83,7 +83,7 @@ htrace-core4/4.1.0-incubating//htrace-core4-4.1.0-incubating.jar
8383
httpclient/4.5.13//httpclient-4.5.13.jar
8484
httpcore/4.4.14//httpcore-4.4.14.jar
8585
istack-commons-runtime/3.0.8//istack-commons-runtime-3.0.8.jar
86-
ivy/2.5.0//ivy-2.5.0.jar
86+
ivy/2.5.1//ivy-2.5.1.jar
8787
jackson-annotations/2.12.3//jackson-annotations-2.12.3.jar
8888
jackson-core-asl/1.9.13//jackson-core-asl-1.9.13.jar
8989
jackson-core/2.12.3//jackson-core-2.12.3.jar

pom.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -141,7 +141,7 @@
141141
<jetty.version>9.4.44.v20210927</jetty.version>
142142
<jakartaservlet.version>4.0.3</jakartaservlet.version>
143143
<chill.version>0.10.0</chill.version>
144-
<ivy.version>2.5.0</ivy.version>
144+
<ivy.version>2.5.1</ivy.version>
145145
<oro.version>2.0.8</oro.version>
146146
<!--
147147
If you changes codahale.metrics.version, you also need to change

0 commit comments

Comments
 (0)