Update commons-dbcp2 version to fix common vulnerabilities and exposures

This is the commit message #2: Update commons-dbcp2 version to fix common vulnerabilities and exposures Update commons-dbcp2 version to fix common vulnerabilities and exposures
prestodb · Dec 13, 2024 · 0bc5315 · 0bc5315
1 parent e8cca76
commit 0bc5315
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 0 deletions.
diff --git a/presto-pinot/pom.xml b/presto-pinot/pom.xml
@@ -118,6 +118,13 @@
             <type>test-jar</type>
             <scope>test</scope>
         </dependency>
+        <dependency>
+            <groupId>org.apache.commons</groupId>
+            <artifactId>commons-dbcp2</artifactId>
+            <version>2.12.0</version>
+            <scope>runtime</scope>
+            <optional>true</optional>
+        </dependency>
     </dependencies>
 
     <build>
@@ -184,6 +191,10 @@
                                 <groupId>org.slf4j</groupId>
                                 <artifactId>slf4j-jdk14</artifactId>
                             </dependency>
+                            <dependency>
+                                <groupId>commons-logging</groupId>
+                                <artifactId>commons-logging</artifactId>
+                            </dependency>
                         </ignoredDependencies>
                     </configuration>
                 </plugin>

diff --git a/presto-product-tests/pom.xml b/presto-product-tests/pom.xml
@@ -168,6 +168,13 @@
             <groupId>com.facebook.presto.hive</groupId>
             <artifactId>hive-apache</artifactId>
         </dependency>
+        <dependency>
+            <groupId>org.apache.commons</groupId>
+            <artifactId>commons-dbcp2</artifactId>
+            <version>2.12.0</version>
+            <scope>runtime</scope>
+            <optional>true</optional>
+        </dependency>
     </dependencies>
 
     <build>