[HADOOP-18693] Upgrade Apache Derby from 10.10.2.0 to 10.14.2.0 due to CVEs

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.4.0
• Fix Version/s: 3.3.6
• Component/s: build, test
• Labels: pull-request-available
• Assignee: PJ Fanning
• Reporter: PJ Fanning
• Created: 07/Apr/23 11:06
• Updated: 21/Jan/24 03:04
• Resolved: 13/Apr/23 17:25

Description

https://github.com/advisories/GHSA-wr69-g62g-2r9h

https://github.com/advisories/GHSA-42xw-p62x-hwcf

https://github.com/apache/hadoop/pull/5427

Only seems to be used in test scope but it would be nice to silence the dependabot warnings by merging the PR. 

 

 

Issue Links

• links to: GitHub Pull Request #5427