Upgrade vulnerable version of reload4j and aws-java-sdk dependencies

Upgrade the aws-java-sdk version to 1.12.640 to fix the ion-java vulnerability Upgrade the reload4j version to 1.2.22 to fix the vulnerability
prestodb · Feb 21, 2025 · 70da419 · 70da419
1 parent 15afc5c
commit 70da419
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/pom.xml b/pom.xml
@@ -48,7 +48,7 @@
         <dep.packaging.version>${dep.airlift.version}</dep.packaging.version>
         <dep.slice.version>0.38</dep.slice.version>
         <dep.testing-mysql-server-5.version>0.6</dep.testing-mysql-server-5.version>
-        <dep.aws-sdk.version>1.12.560</dep.aws-sdk.version>
+        <dep.aws-sdk.version>1.12.640</dep.aws-sdk.version>
         <dep.okhttp.version>3.9.0</dep.okhttp.version>
         <dep.jdbi3.version>3.4.0</dep.jdbi3.version>
         <dep.oracle.version>19.3.0.0</dep.oracle.version>

diff --git a/presto-accumulo/pom.xml b/presto-accumulo/pom.xml
@@ -16,7 +16,7 @@
         <air.main.basedir>${project.parent.basedir}</air.main.basedir>
         <dep.accumulo.version>1.10.1</dep.accumulo.version>
         <dep.curator.version>2.12.0</dep.curator.version>
-        <dep.reload4j.version>1.2.18.3</dep.reload4j.version>
+        <dep.reload4j.version>1.2.22</dep.reload4j.version>
     </properties>
 
     <dependencyManagement>