Skip to content

Conversation

@bjornjorgensen
Copy link
Contributor

@bjornjorgensen bjornjorgensen commented Jul 12, 2023

What changes were proposed in this pull request?

Upgrade H2 from 2.1.214 to 2.2.220

Changelog

Why are the changes needed?

CVE-2022-45868

The following change in the release note fixes the CVE.
581ed18 Merge pull request #3833 from katzyn/password

Does this PR introduce any user-facing change?

No.

How was this patch tested?

Pass GA

@HyukjinKwon
Copy link
Member

Merged to master.

@bjornjorgensen bjornjorgensen deleted the h2-2.2.220 branch July 13, 2023 09:47
@dongjoon-hyun
Copy link
Member

Since this is a test only dependency, let me backport this to branch-3.4 for Apache Spark 3.4.3 release.

dongjoon-hyun pushed a commit that referenced this pull request Apr 5, 2024
### What changes were proposed in this pull request?
Upgrade H2 from 2.1.214 to 2.2.220

[Changelog](https://www.h2database.com/html/changelog.html)

### Why are the changes needed?
[CVE-2022-45868](https://nvd.nist.gov/vuln/detail/CVE-2022-45868)

The following change in the release note fixes the CVE.
[581ed18](h2database/h2database@581ed18) Merge pull request [#3833](https://redirect.github.com/h2database/h2database/issues/3833) from katzyn/password

### Does this PR introduce _any_ user-facing change?
No.

### How was this patch tested?
Pass GA

Closes #41963 from bjornjorgensen/h2-2.2.220.

Authored-by: Bjørn Jørgensen <bjornjorgensen@gmail.com>
Signed-off-by: Hyukjin Kwon <gurwls223@apache.org>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants