From 5b10ebe99fe8cd54c079c67e6b7deeab1cb27dfd Mon Sep 17 00:00:00 2001 From: Patrik Nordwall Date: Tue, 27 Sep 2022 10:00:05 +0200 Subject: [PATCH] Update Hadoop dependency to 3.3.3 (#2916) * CVE-2021-37404 --- project/Dependencies.scala | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/project/Dependencies.scala b/project/Dependencies.scala index e80ddb6988..3066304211 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -164,8 +164,8 @@ object Dependencies { val AvroParquet = Seq( libraryDependencies ++= Seq( "org.apache.parquet" % "parquet-avro" % "1.10.1", //Apache2 - "org.apache.hadoop" % "hadoop-client" % "3.2.1" % Test exclude ("log4j", "log4j"), //Apache2 - "org.apache.hadoop" % "hadoop-common" % "3.2.1" % Test exclude ("log4j", "log4j"), //Apache2 + "org.apache.hadoop" % "hadoop-client" % "3.3.3" % Test exclude ("log4j", "log4j"), //Apache2 + "org.apache.hadoop" % "hadoop-common" % "3.3.3" % Test exclude ("log4j", "log4j"), //Apache2 "com.sksamuel.avro4s" %% "avro4s-core" % "3.0.9" % Test, "org.scalacheck" %% "scalacheck" % "1.15.4" % Test, "org.specs2" %% "specs2-core" % "4.8.3" % Test, //MIT like: https://github.com/etorreborre/specs2/blob/master/LICENSE.txt