[RATIS-1729] Bump shaded.protobuf.version to 3.19.6

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Component/s: build
• Target Version/s: 3.0.0, 2.4.1
• Assignee: Unassigned
• Reporter: Tsz-wo Sze
• Created: 25/Oct/22 08:06
• Updated: 08/Nov/22 20:08
• Resolved: 08/Nov/22 20:08

Description

The shaded.protobuf.version in ratis-thirdparty was bumped to 3.19.6 by RATIS-1718. We should also bump the shaded.protobuf.version in ratis once ratis-thirdparty 1.0.3 has been released.

Note that the current shaded.protobuf.version 3.19.2 has CVE-2022-3171.

Issue Links

• duplicates: RATIS-1739 Upgrade Ratis Thirdparty to 1.0.3
• relates to: RATIS-1718 Bump protobuf-java from 3.19.2 to 3.19.6