From edf6fccf9c42d891a6dbdc03d445632ee7ddcfbd Mon Sep 17 00:00:00 2001 From: kezhenxu94 Date: Fri, 18 Jun 2021 21:18:05 +0800 Subject: [PATCH] Upgrade commons-lang3 to avoid potential NPE in some JDK versions (#7133) --- CHANGES.md | 2 +- oap-server/pom.xml | 2 +- tools/dependencies/known-oap-backend-dependencies-es7.txt | 2 +- tools/dependencies/known-oap-backend-dependencies.txt | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/CHANGES.md b/CHANGES.md index b1b389db96..3a2ae95dcb 100644 --- a/CHANGES.md +++ b/CHANGES.md @@ -36,7 +36,7 @@ Release Notes. * Upgrade zookeeper caused by CVE-2019-0201. * Upgrade snake yaml caused by CVE-2017-18640. * Upgrade embed tomcat caused by CVE-2020-13935. - +* Upgrade commons-lang3 to avoid potential NPE in some JDK versions. #### UI diff --git a/oap-server/pom.xml b/oap-server/pom.xml index e659f5c8c0..f4b8e06092 100755 --- a/oap-server/pom.xml +++ b/oap-server/pom.xml @@ -76,7 +76,7 @@ 2.12.2 2.12.2 1.11 - 3.7 + 3.12.0 1.4 0.6.0 1.8.0 diff --git a/tools/dependencies/known-oap-backend-dependencies-es7.txt b/tools/dependencies/known-oap-backend-dependencies-es7.txt index 9db7b2fd13..d412541283 100755 --- a/tools/dependencies/known-oap-backend-dependencies-es7.txt +++ b/tools/dependencies/known-oap-backend-dependencies-es7.txt @@ -21,7 +21,7 @@ commons-collections4-4.4.jar commons-compress-1.20.jar commons-dbcp-1.4.jar commons-io-2.6.jar -commons-lang3-3.7.jar +commons-lang3-3.12.0.jar commons-pool-1.5.4.jar commons-text-1.4.jar compiler-0.9.6.jar diff --git a/tools/dependencies/known-oap-backend-dependencies.txt b/tools/dependencies/known-oap-backend-dependencies.txt index db5c307736..a8b0cbfdf8 100755 --- a/tools/dependencies/known-oap-backend-dependencies.txt +++ b/tools/dependencies/known-oap-backend-dependencies.txt @@ -21,7 +21,7 @@ commons-collections4-4.4.jar commons-compress-1.20.jar commons-dbcp-1.4.jar commons-io-2.6.jar -commons-lang3-3.7.jar +commons-lang3-3.12.0.jar commons-pool-1.5.4.jar commons-text-1.4.jar consul-client-1.4.2.jar -- GitLab