Skip to content

Commit 60941a7

Browse files
ShahimSharafudeenZacBlanco
authored andcommitted
Fix vulnerability issues in postgresql, commons-compress and snappy-java
Upgrade commons-compress version at 1.26.2 across the codebase to address security vulnerabilities Upgrade snappy-java version at 1.1.10.4 across the codebase to address security vulnerabilities Replace dependency from PostgreSQL to redshift-jdbc42 to address security vulnerabilities
1 parent 5b4b71c commit 60941a7

File tree

4 files changed

+4
-7
lines changed

4 files changed

+4
-7
lines changed

presto-product-tests/pom.xml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -71,7 +71,6 @@
7171
<dependency>
7272
<groupId>org.xerial.snappy</groupId>
7373
<artifactId>snappy-java</artifactId>
74-
<version>1.1.10.1</version>
7574
<scope>runtime</scope>
7675
</dependency>
7776
<dependency>

presto-redshift/pom.xml

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -42,11 +42,10 @@
4242
<artifactId>javax.inject</artifactId>
4343
</dependency>
4444

45-
<!-- old version of the PostgreSQL driver known to work with Redshift -->
4645
<dependency>
47-
<groupId>org.postgresql</groupId>
48-
<artifactId>postgresql</artifactId>
49-
<version>9.3-1102-jdbc41</version>
46+
<groupId>com.amazon.redshift</groupId>
47+
<artifactId>redshift-jdbc42</artifactId>
48+
<version>2.1.0.32</version>
5049
</dependency>
5150

5251
<!-- Presto SPI -->

presto-redshift/src/main/java/com/facebook/presto/plugin/redshift/RedshiftClient.java

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,7 @@
1313
*/
1414
package com.facebook.presto.plugin.redshift;
1515

16+
import com.amazon.redshift.jdbc.Driver;
1617
import com.facebook.presto.plugin.jdbc.BaseJdbcClient;
1718
import com.facebook.presto.plugin.jdbc.BaseJdbcConfig;
1819
import com.facebook.presto.plugin.jdbc.DriverConnectionFactory;
@@ -21,7 +22,6 @@
2122
import com.facebook.presto.spi.ConnectorSession;
2223
import com.facebook.presto.spi.PrestoException;
2324
import com.facebook.presto.spi.SchemaTableName;
24-
import org.postgresql.Driver;
2525

2626
import javax.inject.Inject;
2727

presto-spark-launcher/pom.xml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,6 @@
3939
<dependency>
4040
<groupId>org.apache.commons</groupId>
4141
<artifactId>commons-compress</artifactId>
42-
<version>1.19</version>
4342
</dependency>
4443

4544
<dependency>

0 commit comments

Comments
 (0)