Merge pull request #6366 from yanjungao718/yanjun-cve-bugfix

fix for CVE-2021-22569
microsoft · Jan 26, 2022 · 52be6ef · 52be6ef
2 parents 9e48261 + 34bd71e
commit 52be6ef
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 0 deletions.
diff --git a/Utils/spark-tools/pom.xml b/Utils/spark-tools/pom.xml
@@ -101,6 +101,10 @@
                         <groupId>com.sun.jersey.contribs</groupId>
                         <artifactId>*</artifactId>
                     </exclusion>
+                    <exclusion>
+                        <groupId>com.google.protobuf</groupId>
+                        <artifactId>protobuf-java</artifactId>
+                    </exclusion>
                 </exclusions>
             </dependency>
         </dependencies>

diff --git a/Utils/spark-tools/spark-v2.3/spark-v2.3.0/pom.xml b/Utils/spark-tools/spark-v2.3/spark-v2.3.0/pom.xml
@@ -201,6 +201,10 @@
                     <groupId>org.codehaus.jackson</groupId>
                     <artifactId>jackson-mapper-asl</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>com.google.protobuf</groupId>
+                    <artifactId>protobuf-java</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
         <dependency>

diff --git a/Utils/spark-tools/spark-v2.3/spark-v2.3.2/pom.xml b/Utils/spark-tools/spark-v2.3/spark-v2.3.2/pom.xml
@@ -201,6 +201,10 @@
                     <groupId>org.codehaus.jackson</groupId>
                     <artifactId>jackson-mapper-asl</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>com.google.protobuf</groupId>
+                    <artifactId>protobuf-java</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
         <dependency>