[postgres] Upgrade org.postgresql:postgresql from 42.2.14 to 42.2.26 …

…for CVE-2022-31197 (#1616)
apache · Oct 18, 2022 · f4d2226 · f4d2226
1 parent 0be7843
commit f4d2226
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/flink-connector-postgres-cdc/pom.xml b/flink-connector-postgres-cdc/pom.xml
@@ -47,8 +47,20 @@ under the License.
             <groupId>io.debezium</groupId>
             <artifactId>debezium-connector-postgres</artifactId>
             <version>${debezium.version}</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.postgresql</groupId>
+                    <artifactId>postgresql</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
 
+        <dependency>
+            <!-- fix CVE-2022-31197 https://www.oscs1024.com/hd/CVE-2022-31197  -->
+            <groupId>org.postgresql</groupId>
+            <artifactId>postgresql</artifactId>
+            <version>42.2.26</version>
+        </dependency>
         <!-- test dependencies on Debezium -->
 
         <dependency>