Pin aircompressor

exasol · Jun 3, 2024 · 60abdae · 60abdae
1 parent 0fcfe8b
commit 60abdae
Show file tree

Hide file tree

Showing 2 changed files with 117 additions and 104 deletions.
diff --git a/dependencies.md b/dependencies.md
diff --git a/pom.xml b/pom.xml
@@ -103,6 +103,10 @@
                     <groupId>org.slf4j</groupId>
                     <artifactId>jcl-over-slf4j</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>io.airlift</groupId>
+                    <artifactId>aircompressor</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
         <!-- Override version 3.6.3 of transitive dependency via org.apache.spark:spark-sql_2.12
@@ -204,6 +208,13 @@
             <version>2.10.1</version>
             <scope>provided</scope>
         </dependency>
+        <dependency>
+            <!-- Fix CVE-2024-36114 in transitive dependency of spark-sql -->
+            <groupId>io.airlift</groupId>
+            <artifactId>aircompressor</artifactId>
+            <version>0.27</version>
+            <scope>provided</scope>
+        </dependency>
         <dependency>
             <groupId>org.apache.hadoop</groupId>
             <artifactId>hadoop-aws</artifactId>