fix protobuf vulnerability

hypertrace · Sep 23, 2024 · 8d7995e · 8d7995e
1 parent 276d704
commit 8d7995e
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 1 deletion.
diff --git a/pinot-distribution/pom.xml b/pinot-distribution/pom.xml
@@ -84,6 +84,14 @@
           <groupId>org.apache.pinot</groupId>
           <artifactId>pinot-csv</artifactId>
         </exclusion>
+        <exclusion>
+          <groupId>org.apache.pinot</groupId>
+          <artifactId>pinot-orc</artifactId>
+        </exclusion>
+        <exclusion>
+          <groupId>org.apache.pinot</groupId>
+          <artifactId>pinot-parquet</artifactId>
+        </exclusion>
         <exclusion>
           <groupId>org.apache.pinot</groupId>
           <artifactId>pinot-kafka-base</artifactId>
@@ -92,6 +100,10 @@
           <groupId>org.apache.pinot</groupId>
           <artifactId>pinot-kafka-2.0</artifactId>
         </exclusion>
+        <exclusion>
+          <groupId>org.apache.pinot</groupId>
+          <artifactId>pinot-hdfs</artifactId>
+        </exclusion>
         <exclusion>
           <groupId>org.apache.pinot</groupId>
           <artifactId>pinot-kinesis</artifactId>

diff --git a/pom.xml b/pom.xml
@@ -223,7 +223,7 @@
     <httpcore5.version>5.2.4</httpcore5.version>
 
     <!-- Google Libraries -->
-    <protobuf.version>3.25.3</protobuf.version>
+    <protobuf.version>3.25.5</protobuf.version>
     <grpc.version>1.65.0</grpc.version>
     <google.cloud.libraries.version>26.42.0</google.cloud.libraries.version>
     <google.auto-service.version>1.1.1</google.auto-service.version>