Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[security] Upgrade Postgre driver to 42.2.25 to get rid of CVE-2022-2…
…1724 (apache#14119) ### Motivation http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-21724 ### Modifications Upgrade both `jdbc` and `debezium` Postgre java driver dependency to 42.2.25 (from 42.2.24 and 42.2.22). Note: the version is not shared on purpose because we should leave the driver dependencies separated since the two connectors are used in different ways. (For example, when we'll upgrade Debezium to 1.8.x we'll need to remove the override and keep the 42.3.x version) For cherry-picks, branch-2.9 and branch-2.8 are compatible since: * branch-2.9 has the same debezium version * branch-2.8 has 1.0.0 but it uses [pg driver 42.2.x](https://search.maven.org/artifact/io.debezium/debezium-parent/1.0.0.Final/pom) as well ### Documentation - [x] `no-need-doc`
- Loading branch information