#854: Update pyarrow to fix CVE-2023-47248 (#391)

* Updated pyarrow to 14.0.1 * Used c++17 to build the udfclient, because abseil in protobuf 4.24.4 depends on std::string_view
exasol · Nov 15, 2023 · 0bfb552 · 0bfb552
1 parent c6fae96
commit 0bfb552
Show file tree

Hide file tree

Showing 8 changed files with 10 additions and 10 deletions.
diff --git a/exaudfclient/base/.bazelrc b/exaudfclient/base/.bazelrc
@@ -1,4 +1,4 @@
-build --copt='-std=c++14' --force_pic --action_env=PROTOBUF_BIN --action_env=PROTOBUF_LIBRARY_PREFIX --action_env=PROTOBUF_INCLUDE_PREFIX 
+build --copt='-std=c++17' --force_pic --action_env=PROTOBUF_BIN --action_env=PROTOBUF_LIBRARY_PREFIX --action_env=PROTOBUF_INCLUDE_PREFIX 
 # TODO add environment variables for R libraries
 build:benchmark --define benchmark=true
 build:java  --define java=true --action_env=JAVA_PREFIX

diff --git a/...s/python-3.8-minimal-EXASOL-6.2.0/flavor_base/language_deps/packages/python3_pip_packages b/...s/python-3.8-minimal-EXASOL-6.2.0/flavor_base/language_deps/packages/python3_pip_packages
@@ -1,3 +1,3 @@
 pandas|2.0.2 
 numpy|1.24.3
-pyarrow|12.0.0
+pyarrow|14.0.1
diff --git a/flavors/template-Exasol-all-python-3.8-conda/flavor_base/build_deps/packages/conda_packages b/flavors/template-Exasol-all-python-3.8-conda/flavor_base/build_deps/packages/conda_packages
@@ -1,4 +1,4 @@
-protobuf|4.21.12
+protobuf|4.24.4
 pcre|8.45
 chrpath|0.16
 openjdk|11.0.15

diff --git a/...rs/template-Exasol-all-python-3.8-conda/flavor_base/language_deps/packages/conda_packages b/...rs/template-Exasol-all-python-3.8-conda/flavor_base/language_deps/packages/conda_packages
@@ -1,7 +1,7 @@
 python|3.8.13
 numpy|1.24.3
 pandas|2.0.2
-pyarrow|12.0.0
+pyarrow|14.0.1
 libblas|3.9.0=15_linux64_mkl
 mamba|1.3.1
 ld_impl_linux-64|2.36.1

diff --git a/...s/template-Exasol-all-python-3.8-conda/flavor_base/udfclient_deps/packages/conda_packages b/...s/template-Exasol-all-python-3.8-conda/flavor_base/udfclient_deps/packages/conda_packages
@@ -1,6 +1,6 @@
-libprotobuf|3.21.12
+libprotobuf|4.24.4
 zeromq|4.3.4
-openssl|3.1.2
+openssl|3.1.4
 nss|3.77
 cppzmq|4.8.1
 _openmp_mutex|4.5=2_kmp_llvm # We need this, such that we can later install libblas with mkl, which is for example needed by pytorch
diff --git a/.../template-Exasol-all-python-3.8-cuda-conda/flavor_base/build_deps/packages/conda_packages b/.../template-Exasol-all-python-3.8-cuda-conda/flavor_base/build_deps/packages/conda_packages
@@ -1,4 +1,4 @@
-protobuf|4.21.12
+protobuf|4.24.4
 pcre|8.45
 chrpath|0.16
 openjdk|11.0.15

diff --git a/...mplate-Exasol-all-python-3.8-cuda-conda/flavor_base/language_deps/packages/conda_packages b/...mplate-Exasol-all-python-3.8-cuda-conda/flavor_base/language_deps/packages/conda_packages
@@ -1,7 +1,7 @@
 python|3.8.13
 numpy|1.24.3
 pandas|2.0.2
-pyarrow|12.0.0=py38h4559c88_4_cuda
+pyarrow|14.0.1=py38h296dbf9_0_cuda
 libblas|3.9.0=15_linux64_mkl
 mamba|1.3.1
 ld_impl_linux-64|2.36.1

diff --git a/...plate-Exasol-all-python-3.8-cuda-conda/flavor_base/udfclient_deps/packages/conda_packages b/...plate-Exasol-all-python-3.8-cuda-conda/flavor_base/udfclient_deps/packages/conda_packages
@@ -1,6 +1,6 @@
-libprotobuf|3.21.12
+libprotobuf|4.24.4
 zeromq|4.3.4
-openssl|3.1.2
+openssl|3.1.4
 nss|3.77
 cppzmq|4.8.1
 _openmp_mutex|4.5=2_kmp_llvm # We need this, such that we can later install libblas with mkl, which is for example needed by pytorch