Skip to content

Commit

Permalink
eclipse-rdf4jGH-5060: use more recent version of zookeeper to fix CVE
Browse files Browse the repository at this point in the history
  • Loading branch information
barthanssens committed Jun 28, 2024
1 parent 51f09c3 commit afa5ed4
Showing 1 changed file with 75 additions and 63 deletions.
138 changes: 75 additions & 63 deletions core/sail/solr/pom.xml
Original file line number Diff line number Diff line change
@@ -1,66 +1,78 @@
<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
<modelVersion>4.0.0</modelVersion>
<parent>
<groupId>org.eclipse.rdf4j</groupId>
<artifactId>rdf4j-sail</artifactId>
<version>5.1.0-SNAPSHOT</version>
</parent>
<artifactId>rdf4j-sail-solr</artifactId>
<name>RDF4J: Solr Sail Index</name>
<description>StackableSail implementation offering full-text search on literals, based on Solr.</description>
<properties>
<!-- FIXME: Support for embedded Solr server require non-provided Java EE dependencies -->
<enforce-javaee-provided.fail>false</enforce-javaee-provided.fail>
</properties>
<dependencies>
<dependency>
<groupId>${project.groupId}</groupId>
<artifactId>rdf4j-sail-lucene-api</artifactId>
<version>${project.version}</version>
</dependency>
<dependency>
<groupId>org.apache.solr</groupId>
<artifactId>solr-solrj</artifactId>
<version>${solr.version}</version>
<exclusions>
<exclusion>
<artifactId>httpcore</artifactId>
<groupId>org.apache.httpcomponents</groupId>
</exclusion>
</exclusions>
</dependency>
<!-- needed for embedded solr server -->
<dependency>
<groupId>org.apache.solr</groupId>
<artifactId>solr-core</artifactId>
<version>${solr.version}</version>
<optional>true</optional>
<exclusions>
<exclusion>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>*</artifactId>
</exclusion>
<exclusion>
<groupId>jdk.tools</groupId>
<artifactId>jdk.tools</artifactId>
</exclusion>
</exclusions>
</dependency>
</dependencies>
<repositories>
<repository>
<!-- contains a solr-core transitive dependency -->
<id>maven-restlet</id>
<name>Public online Restlet repository</name>
<url>https://maven.restlet.talend.com</url>
<releases>
<enabled>true</enabled>
</releases>
<snapshots>
<enabled>false</enabled>
<updatePolicy>never</updatePolicy>
</snapshots>
</repository>
</repositories>
<modelVersion>4.0.0</modelVersion>
<parent>
<groupId>org.eclipse.rdf4j</groupId>
<artifactId>rdf4j-sail</artifactId>
<version>5.1.0-SNAPSHOT</version>
</parent>
<artifactId>rdf4j-sail-solr</artifactId>
<name>RDF4J: Solr Sail Index</name>
<description>StackableSail implementation offering full-text search on literals, based on Solr.</description>
<properties>
<!-- FIXME: Support for embedded Solr server require non-provided Java EE dependencies -->
<enforce-javaee-provided.fail>false</enforce-javaee-provided.fail>
</properties>

<dependencies>
<!-- use at least 3.7.2 to fix CVE -->
<dependency>
<groupId>org.apache.zookeeper</groupId>
<artifactId>zookeeper</artifactId>
<version>3.7.2</version>
</dependency>
<dependency>
<groupId>org.apache.zookeeper</groupId>
<artifactId>zookeeper-jute</artifactId>
<version>3.7.2</version>
</dependency>
<dependency>
<groupId>${project.groupId}</groupId>
<artifactId>rdf4j-sail-lucene-api</artifactId>
<version>${project.version}</version>
</dependency>
<dependency>
<groupId>org.apache.solr</groupId>
<artifactId>solr-solrj</artifactId>
<version>${solr.version}</version>
<exclusions>
<exclusion>
<artifactId>httpcore</artifactId>
<groupId>org.apache.httpcomponents</groupId>
</exclusion>
</exclusions>
</dependency>
<!-- needed for embedded solr server -->
<dependency>
<groupId>org.apache.solr</groupId>
<artifactId>solr-core</artifactId>
<version>${solr.version}</version>
<optional>true</optional>
<exclusions>
<exclusion>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>*</artifactId>
</exclusion>
<exclusion>
<groupId>jdk.tools</groupId>
<artifactId>jdk.tools</artifactId>
</exclusion>
</exclusions>
</dependency>
</dependencies>
<repositories>
<repository>
<!-- contains a solr-core transitive dependency -->
<id>maven-restlet</id>
<name>Public online Restlet repository</name>
<url>https://maven.restlet.talend.com</url>
<releases>
<enabled>true</enabled>
</releases>
<snapshots>
<enabled>false</enabled>
<updatePolicy>never</updatePolicy>
</snapshots>
</repository>
</repositories>
</project>

0 comments on commit afa5ed4

Please sign in to comment.