[FLINK-36197] bump curator-test, derby and postgres

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: kubernetes-operator-1.10.0
• Fix Version/s: kubernetes-operator-1.10.0
• Component/s: Kubernetes Operator
• Labels: pull-request-available
• Release Note: Merged to main `6d148a8b`
• Assignee: Siddharth R
• Reporter: Siddharth R
• Created: 02/Sep/24 18:32
• Updated: 14/Oct/24 18:11
• Resolved: 14/Oct/24 17:08

Description

Bump curator-test version to latest (5.7.0) to remediate the vulnerabilities in the dependant packages.

CVE details:

CVE-2024-23944
CVE-2023-44981
CVE-2023-43642
CVE-2023-34455
CVE-2023-34454
CVE-2023-34453
CVE-2023-2976
CVE-2020-8908

Package details:
https://mvnrepository.com/artifact/org.apache.curator/curator-test/5.7.0

 

Bump postgresql version to 42.5.6 to remediate a direct finding.
Finding details:
CVE-2024-1597

Package details:
https://mvnrepository.com/artifact/org.postgresql/postgresql/42.5.6

Bump derby version to latest (10.17.1.0) to remediate direct finding.
Finding details:
CVE-2022-46337

Package details:
https://mvnrepository.com/artifact/org.apache.derby/derby/10.17.1.0

Issue Links

• links to: GitHub Pull Request #878