fix high Vulnerabilities protobuf-java & akka.http (intel#4115)

chensuyue · Feb 25, 2022 · b29039d · b29039d
1 parent b2f48a0
commit b29039d
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 3 deletions.
diff --git a/scala/dllib/pom.xml b/scala/dllib/pom.xml
@@ -34,7 +34,7 @@
         <dependency>
             <groupId>com.google.protobuf</groupId>
             <artifactId>protobuf-java</artifactId>
-            <version>3.4.0</version>
+            <version>3.19.2</version>
         </dependency>
         <dependency>
             <groupId>org.apache.hadoop</groupId>
@@ -290,7 +290,13 @@
         <dependency>
             <groupId>org.tensorflow</groupId>
             <artifactId>proto</artifactId>
-            <version>1.15.0</version>
+	    <version>1.15.0</version>
+	    <exclusions>
+                <exclusion>
+                    <groupId>com.google.protobuf</groupId>
+                    <artifactId>protobuf-java</artifactId>
+                </exclusion>
+            </exclusions>
         </dependency>
         <dependency>
             <groupId>log4j</groupId>

diff --git a/scala/serving/pom.xml b/scala/serving/pom.xml
@@ -13,7 +13,7 @@
     <packaging>jar</packaging>
 
     <properties>
-        <akka.http.version>10.1.11</akka.http.version>
+        <akka.http.version>10.1.15</akka.http.version>
         <akka.actor.version>2.5.26</akka.actor.version>
         <spark-scope>compile</spark-scope>
     </properties>