[CALCITE-5007] Upgrade H2 database version to 2.1.210

• Type: Task
• Status: Closed
• Priority: Trivial
• Resolution: Fixed
• Fix Version/s: 1.30.0
• Labels: pull-request-available
• Assignee: Stamatis Zampetakis
• Reporter: Stamatis Zampetakis
• Created: 09/Feb/22 16:51
• Updated: 19/Mar/22 09:15
• Resolved: 14/Feb/22 09:40

Description

The 1.4.197 version suffers from multiple CVEs such as:
https://nvd.nist.gov/vuln/detail/CVE-2018-14335
https://nvd.nist.gov/vuln/detail/CVE-2018-10054
https://nvd.nist.gov/vuln/detail/CVE-2021-42392
https://nvd.nist.gov/vuln/detail/CVE-2022-23221

In the project, we use H2 only for testing purposes thus the H2 binaries are not present in the runtime classpath thus these CVEs do not pose a problem for Calcite or its users. Nevertheless, it would be good to upgrade to a more recent version to avoid Calcite coming up in vulnerability scans due to this.

Issue Links

• links to: GitHub Pull Request #2717