presto icon indicating copy to clipboard operation
presto copied to clipboard

[DRAFT] Security Vulnerability Fix

Open KarthikaPKumar opened this issue 11 months ago • 2 comments

Description

Motivation and Context

Impact

Test Plan

Contributor checklist

  • [ ] Please make sure your submission complies with our development, formatting, commit message, and attribution guidelines.
  • [ ] PR description addresses the issue accurately and concisely. If the change is non-trivial, a GitHub Issue is referenced.
  • [ ] Documented new properties (with its default value), SQL syntax, functions, or other functionality.
  • [ ] If release notes are required, they follow the release notes guidelines.
  • [ ] Adequate tests were added if applicable.
  • [ ] CI passed.

Release Notes

Please follow release notes guidelines and fill in the release notes below.

== RELEASE NOTES ==

General Changes
* ...
* ...

Hive Changes
* ...
* ...

If release note is NOT required, use:

== NO RELEASE NOTE ==

KarthikaPKumar avatar Feb 26 '24 07:02 KarthikaPKumar

CLA Not Signed

  • :x: - login: @KarthikaPKumar / name: Karthika P Kumar . The commit (2b87887c929f9e49163cc73e2abab36258f40357, e020b21c5bdbd5fd0f5c70922560e5025859aa7d, 2108311dedc08e289ff91ad41bb69b4c888aacc4, 371d8d81d72d79914de1d59b46a546fdcc5cdf7d) is not authorized under a signed CLA. Please click here to be authorized. For further assistance with EasyCLA, please submit a support request ticket.

Thanks for this!

== RELEASE NOTES ==

Security Changes
* Upgrade postgresql to 42.7.2.

steveburnett avatar Feb 26 '24 18:02 steveburnett

It appears this is failing:

Require upper bound dependencies error for org.checkerframework:checker-qual:3.37.0 paths to dependency are:
+-com.facebook.presto:presto-postgresql:0.287-SNAPSHOT
  +-com.google.guava:guava:26.0-jre
    +-org.checkerframework:checker-qual:3.37.0 (managed) <-- org.checkerframework:checker-qual:2.5.2
and
+-com.facebook.presto:presto-postgresql:0.287-SNAPSHOT
  +-org.postgresql:postgresql:42.7.2
    +-org.checkerframework:checker-qual:3.37.0 (managed) <-- org.checkerframework:checker-qual:3.42.0

tdcmeehan avatar Feb 27 '24 16:02 tdcmeehan