presto
presto copied to clipboard
[DRAFT] Security Vulnerability Fix
Description
Motivation and Context
Impact
Test Plan
Contributor checklist
- [ ] Please make sure your submission complies with our development, formatting, commit message, and attribution guidelines.
- [ ] PR description addresses the issue accurately and concisely. If the change is non-trivial, a GitHub Issue is referenced.
- [ ] Documented new properties (with its default value), SQL syntax, functions, or other functionality.
- [ ] If release notes are required, they follow the release notes guidelines.
- [ ] Adequate tests were added if applicable.
- [ ] CI passed.
Release Notes
Please follow release notes guidelines and fill in the release notes below.
== RELEASE NOTES ==
General Changes
* ...
* ...
Hive Changes
* ...
* ...
If release note is NOT required, use:
== NO RELEASE NOTE ==
- :x: - login: @KarthikaPKumar / name: Karthika P Kumar . The commit (2b87887c929f9e49163cc73e2abab36258f40357, e020b21c5bdbd5fd0f5c70922560e5025859aa7d, 2108311dedc08e289ff91ad41bb69b4c888aacc4, 371d8d81d72d79914de1d59b46a546fdcc5cdf7d) is not authorized under a signed CLA. Please click here to be authorized. For further assistance with EasyCLA, please submit a support request ticket.
Thanks for this!
-
Please sign the CLA by selecting the Please click here to be authorized link in the earlier comment. For context, see the Contributor License Agreement ("CLA") topic in CONTRIBUTING.md.
-
Please include a release note entry following the release notes guidelines. Something like:
== RELEASE NOTES ==
Security Changes
* Upgrade postgresql to 42.7.2.
It appears this is failing:
Require upper bound dependencies error for org.checkerframework:checker-qual:3.37.0 paths to dependency are:
+-com.facebook.presto:presto-postgresql:0.287-SNAPSHOT
+-com.google.guava:guava:26.0-jre
+-org.checkerframework:checker-qual:3.37.0 (managed) <-- org.checkerframework:checker-qual:2.5.2
and
+-com.facebook.presto:presto-postgresql:0.287-SNAPSHOT
+-org.postgresql:postgresql:42.7.2
+-org.checkerframework:checker-qual:3.37.0 (managed) <-- org.checkerframework:checker-qual:3.42.0