From 0bfb552eaa0170d20b44d5e74d8242d23ea2d90b Mon Sep 17 00:00:00 2001 From: Torsten Kilias Date: Wed, 15 Nov 2023 16:59:55 +0100 Subject: [PATCH] #854: Update pyarrow to fix CVE-2023-47248 (#391) * Updated pyarrow to 14.0.1 * Used c++17 to build the udfclient, because abseil in protobuf 4.24.4 depends on std::string_view --- exaudfclient/base/.bazelrc | 2 +- .../flavor_base/language_deps/packages/python3_pip_packages | 2 +- .../flavor_base/build_deps/packages/conda_packages | 2 +- .../flavor_base/language_deps/packages/conda_packages | 2 +- .../flavor_base/udfclient_deps/packages/conda_packages | 4 ++-- .../flavor_base/build_deps/packages/conda_packages | 2 +- .../flavor_base/language_deps/packages/conda_packages | 2 +- .../flavor_base/udfclient_deps/packages/conda_packages | 4 ++-- 8 files changed, 10 insertions(+), 10 deletions(-) diff --git a/exaudfclient/base/.bazelrc b/exaudfclient/base/.bazelrc index 82c7b4a49..1607ca871 100644 --- a/exaudfclient/base/.bazelrc +++ b/exaudfclient/base/.bazelrc @@ -1,4 +1,4 @@ -build --copt='-std=c++14' --force_pic --action_env=PROTOBUF_BIN --action_env=PROTOBUF_LIBRARY_PREFIX --action_env=PROTOBUF_INCLUDE_PREFIX +build --copt='-std=c++17' --force_pic --action_env=PROTOBUF_BIN --action_env=PROTOBUF_LIBRARY_PREFIX --action_env=PROTOBUF_INCLUDE_PREFIX # TODO add environment variables for R libraries build:benchmark --define benchmark=true build:java --define java=true --action_env=JAVA_PREFIX diff --git a/flavors/python-3.8-minimal-EXASOL-6.2.0/flavor_base/language_deps/packages/python3_pip_packages b/flavors/python-3.8-minimal-EXASOL-6.2.0/flavor_base/language_deps/packages/python3_pip_packages index 827abf566..9792cb7b7 100644 --- a/flavors/python-3.8-minimal-EXASOL-6.2.0/flavor_base/language_deps/packages/python3_pip_packages +++ b/flavors/python-3.8-minimal-EXASOL-6.2.0/flavor_base/language_deps/packages/python3_pip_packages @@ -1,3 +1,3 @@ pandas|2.0.2 numpy|1.24.3 -pyarrow|12.0.0 +pyarrow|14.0.1 diff --git a/flavors/template-Exasol-all-python-3.8-conda/flavor_base/build_deps/packages/conda_packages b/flavors/template-Exasol-all-python-3.8-conda/flavor_base/build_deps/packages/conda_packages index be5c471b2..0c94ca274 100644 --- a/flavors/template-Exasol-all-python-3.8-conda/flavor_base/build_deps/packages/conda_packages +++ b/flavors/template-Exasol-all-python-3.8-conda/flavor_base/build_deps/packages/conda_packages @@ -1,4 +1,4 @@ -protobuf|4.21.12 +protobuf|4.24.4 pcre|8.45 chrpath|0.16 openjdk|11.0.15 diff --git a/flavors/template-Exasol-all-python-3.8-conda/flavor_base/language_deps/packages/conda_packages b/flavors/template-Exasol-all-python-3.8-conda/flavor_base/language_deps/packages/conda_packages index 9c8fb8dab..cb2c60c30 100644 --- a/flavors/template-Exasol-all-python-3.8-conda/flavor_base/language_deps/packages/conda_packages +++ b/flavors/template-Exasol-all-python-3.8-conda/flavor_base/language_deps/packages/conda_packages @@ -1,7 +1,7 @@ python|3.8.13 numpy|1.24.3 pandas|2.0.2 -pyarrow|12.0.0 +pyarrow|14.0.1 libblas|3.9.0=15_linux64_mkl mamba|1.3.1 ld_impl_linux-64|2.36.1 diff --git a/flavors/template-Exasol-all-python-3.8-conda/flavor_base/udfclient_deps/packages/conda_packages b/flavors/template-Exasol-all-python-3.8-conda/flavor_base/udfclient_deps/packages/conda_packages index dc9273496..1c68ab0d4 100644 --- a/flavors/template-Exasol-all-python-3.8-conda/flavor_base/udfclient_deps/packages/conda_packages +++ b/flavors/template-Exasol-all-python-3.8-conda/flavor_base/udfclient_deps/packages/conda_packages @@ -1,6 +1,6 @@ -libprotobuf|3.21.12 +libprotobuf|4.24.4 zeromq|4.3.4 -openssl|3.1.2 +openssl|3.1.4 nss|3.77 cppzmq|4.8.1 _openmp_mutex|4.5=2_kmp_llvm # We need this, such that we can later install libblas with mkl, which is for example needed by pytorch diff --git a/flavors/template-Exasol-all-python-3.8-cuda-conda/flavor_base/build_deps/packages/conda_packages b/flavors/template-Exasol-all-python-3.8-cuda-conda/flavor_base/build_deps/packages/conda_packages index be5c471b2..0c94ca274 100644 --- a/flavors/template-Exasol-all-python-3.8-cuda-conda/flavor_base/build_deps/packages/conda_packages +++ b/flavors/template-Exasol-all-python-3.8-cuda-conda/flavor_base/build_deps/packages/conda_packages @@ -1,4 +1,4 @@ -protobuf|4.21.12 +protobuf|4.24.4 pcre|8.45 chrpath|0.16 openjdk|11.0.15 diff --git a/flavors/template-Exasol-all-python-3.8-cuda-conda/flavor_base/language_deps/packages/conda_packages b/flavors/template-Exasol-all-python-3.8-cuda-conda/flavor_base/language_deps/packages/conda_packages index 8bc9cb290..b8ec7055c 100644 --- a/flavors/template-Exasol-all-python-3.8-cuda-conda/flavor_base/language_deps/packages/conda_packages +++ b/flavors/template-Exasol-all-python-3.8-cuda-conda/flavor_base/language_deps/packages/conda_packages @@ -1,7 +1,7 @@ python|3.8.13 numpy|1.24.3 pandas|2.0.2 -pyarrow|12.0.0=py38h4559c88_4_cuda +pyarrow|14.0.1=py38h296dbf9_0_cuda libblas|3.9.0=15_linux64_mkl mamba|1.3.1 ld_impl_linux-64|2.36.1 diff --git a/flavors/template-Exasol-all-python-3.8-cuda-conda/flavor_base/udfclient_deps/packages/conda_packages b/flavors/template-Exasol-all-python-3.8-cuda-conda/flavor_base/udfclient_deps/packages/conda_packages index dc9273496..1c68ab0d4 100644 --- a/flavors/template-Exasol-all-python-3.8-cuda-conda/flavor_base/udfclient_deps/packages/conda_packages +++ b/flavors/template-Exasol-all-python-3.8-cuda-conda/flavor_base/udfclient_deps/packages/conda_packages @@ -1,6 +1,6 @@ -libprotobuf|3.21.12 +libprotobuf|4.24.4 zeromq|4.3.4 -openssl|3.1.2 +openssl|3.1.4 nss|3.77 cppzmq|4.8.1 _openmp_mutex|4.5=2_kmp_llvm # We need this, such that we can later install libblas with mkl, which is for example needed by pytorch