Downgraded scala back to 2.13.11 and ran pk fix

exasol · Oct 26, 2023 · f37fb4d · f37fb4d
1 parent 2c2ed90
commit f37fb4d
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 6 deletions.
diff --git a/dependencies.md b/dependencies.md
diff --git a/doc/changes/changes_2.7.6.md b/doc/changes/changes_2.7.6.md
@@ -28,7 +28,6 @@ This release fixes vulnerabilities
 * Updated `org.apache.logging.log4j:log4j-api:2.20.0` to `2.21.1`
 * Updated `org.apache.logging.log4j:log4j-core:2.20.0` to `2.21.1`
 * Added `org.apache.zookeeper:zookeeper:3.9.1`
-* Updated `org.scala-lang:scala-library:2.13.11` to `2.13.12`
 
 #### Test Dependency Updates
 

diff --git a/pom.xml b/pom.xml
@@ -14,7 +14,7 @@
         <relativePath>pk_generated_parent.pom</relativePath>
     </parent>
     <properties>
-        <scala.version>2.13.12</scala.version>
+        <scala.version>2.13.11</scala.version>
         <scala.compat.version>2.13</scala.compat.version>
         <hadoop.version>3.3.6</hadoop.version>
         <log4j.version>2.21.1</log4j.version>
@@ -191,6 +191,7 @@
             <version>${hadoop.version}</version>
         </dependency>
         <dependency>
+            <!-- override version 3.6.3 to fix vulnerability CVE-2023-42503 -->
             <groupId>org.apache.zookeeper</groupId>
             <artifactId>zookeeper</artifactId>
             <version>3.9.1</version>
@@ -328,6 +329,7 @@
                     <artifactId>grpc-core</artifactId>
                 </exclusion>
                 <exclusion>
+                    <!-- exclude to avoid vulnerability CVE-2023-46120 in version 5.5.3 -->
                     <groupId>com.rabbitmq</groupId>
                     <artifactId>amqp-client</artifactId>
                 </exclusion>