[Enhancement] Adding exclusions for libraries to fix CVEs (StarRocks#…

…50283) Signed-off-by: Vikas Attiguppa <[email protected]>
vivo · Sep 11, 2024 · a22f115 · a22f115
1 parent a8af0fc
commit a22f115
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/contrib/trino-connector/pom.xml b/contrib/trino-connector/pom.xml
@@ -38,6 +38,10 @@
                     <groupId>com.alibaba</groupId>
                     <artifactId>fastjson</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>org.eclipse.jetty.http2</groupId>
+                    <artifactId>http2-common</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
 

diff --git a/fs_brokers/apache_hdfs_broker/src/hadoop-cos-shaded/pom.xml b/fs_brokers/apache_hdfs_broker/src/hadoop-cos-shaded/pom.xml
@@ -43,7 +43,7 @@ under the License.
         <dependency>
             <groupId>com.qcloud.cos</groupId>
             <artifactId>hadoop-cos</artifactId>
-            <version>3.3.0-8.3.7</version>
+            <version>3.3.3-8.3.10</version>
         </dependency>
 
         <!-- https://mvnrepository.com/artifact/com.qcloud/cos_api-bundle -->