Skip to content

Commit 5d62f47

Browse files
bjornjorgensensrowen
authored andcommitted
[SPARK-40801][BUILD][3.2] Upgrade Apache commons-text to 1.10
### What changes were proposed in this pull request? Upgrade Apache commons-text from 1.6 to 1.10.0 ### Why are the changes needed? [CVE-2022-42889](https://nvd.nist.gov/vuln/detail/CVE-2022-42889) this is a [9.8 CRITICAL](https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?name=CVE-2022-42889&vector=AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H&version=3.1&source=NIST) ### Does this PR introduce _any_ user-facing change? No. ### How was this patch tested? Pass GA Closes apache#38352 from bjornjorgensen/patch-2. Lead-authored-by: Bjørn Jørgensen <[email protected]> Co-authored-by: Bjørn <[email protected]> Signed-off-by: Sean Owen <[email protected]>
1 parent 1aef8b7 commit 5d62f47

File tree

3 files changed

+3
-3
lines changed

3 files changed

+3
-3
lines changed

dev/deps/spark-deps-hadoop-2.7-hive-2.3

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ commons-logging/1.1.3//commons-logging-1.1.3.jar
5151
commons-math3/3.4.1//commons-math3-3.4.1.jar
5252
commons-net/3.1//commons-net-3.1.jar
5353
commons-pool/1.5.4//commons-pool-1.5.4.jar
54-
commons-text/1.6//commons-text-1.6.jar
54+
commons-text/1.10.0//commons-text-1.10.0.jar
5555
compress-lzf/1.0.3//compress-lzf-1.0.3.jar
5656
core/1.1.2//core-1.1.2.jar
5757
curator-client/2.7.1//curator-client-2.7.1.jar

dev/deps/spark-deps-hadoop-3.2-hive-2.3

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ commons-logging/1.1.3//commons-logging-1.1.3.jar
4242
commons-math3/3.4.1//commons-math3-3.4.1.jar
4343
commons-net/3.1//commons-net-3.1.jar
4444
commons-pool/1.5.4//commons-pool-1.5.4.jar
45-
commons-text/1.6//commons-text-1.6.jar
45+
commons-text/1.10.0//commons-text-1.10.0.jar
4646
compress-lzf/1.0.3//compress-lzf-1.0.3.jar
4747
core/1.1.2//core-1.1.2.jar
4848
curator-client/2.13.0//curator-client-2.13.0.jar

pom.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -566,7 +566,7 @@
566566
<dependency>
567567
<groupId>org.apache.commons</groupId>
568568
<artifactId>commons-text</artifactId>
569-
<version>1.6</version>
569+
<version>1.10.0</version>
570570
</dependency>
571571
<dependency>
572572
<groupId>commons-lang</groupId>

0 commit comments

Comments
 (0)