File tree Expand file tree Collapse file tree 1 file changed +15
-16
lines changed
druid/stackable/patches/30.0.0 Expand file tree Collapse file tree 1 file changed +15
-16
lines changed Original file line number Diff line number Diff line change @@ -10,28 +10,27 @@ is then also downloaded even though a newer version is already on the system.
1010This patch removes the vulnerable jars.
1111
1212diff --git a/distribution/pom.xml b/distribution/pom.xml
13- index d5918710ef..bba99d078c 100644
13+ index d5918710ef..cc2d88441c 100644
1414--- a/distribution/pom.xml
1515+++ b/distribution/pom.xml
16- @@ -594,6 +594,21 @@
16+ @@ -594,6 +594,20 @@
1717 </arguments>
1818 </configuration>
1919 </execution>
20+ + <execution>
21+ + <id>fix-cve-2023-34455-remove-snappy</id>
22+ + <phase>package</phase>
23+ + <goals>
24+ + <goal>exec</goal>
25+ + </goals>
26+ + <configuration>
27+ + <executable>rm</executable>
28+ + <arguments>
29+ + <argument>${project.build.directory}/hadoop-dependencies/hadoop-client-api/3.3.6/snappy-java-1.1.8.2.jar</argument>
30+ + <argument>${project.build.directory}/hadoop-dependencies/hadoop-client-runtime/3.3.6/snappy-java-1.1.8.2.jar</argument>
31+ + </arguments>
32+ + </configuration>
2033+ </execution>
21- + + <execution>
22- + + <id>fix-cve-2023-34455-remove-snappy</id>
23- + + <phase>package</phase>
24- + + <goals>
25- + + <goal>exec</goal>
26- + + </goals>
27- + + <configuration>
28- + + <executable>rm</executable>
29- + + <arguments>
30- + + <argument>${project.build.directory}/hadoop-dependencies/hadoop-client-api/3.3.6/snappy-java-1.1.8.2.jar</argument>
31- + + <argument>${project.build.directory}/hadoop-dependencies/hadoop-client-runtime/3.3.6/snappy-java-1.1.8.2.jar</argument>
32- + + </arguments>
33- + + </configuration>
34- + + </execution>
3534 </executions>
3635 </plugin>
3736 <plugin>
You can’t perform that action at this time.
0 commit comments