This is an automated email from the ASF dual-hosted git repository. abstractdog pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/tez.git
commit b73cfcd30aa21f7bec031f0d64b4320f5cfd986d Author: BilwaST <bi...@apache.org> AuthorDate: Fri Feb 24 18:09:19 2023 +0530 TEZ-4469: Upgrade jettison to 1.5.3 to fix CVE-2022-45685, CVE-2022-45693 (#271) (Bilwa S T reviewed by Laszlo Bodor) --- pom.xml | 2 +- tez-dag/src/main/java/org/apache/tez/dag/history/utils/DAGUtils.java | 5 +++-- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/pom.xml b/pom.xml index 5a1aba89a..589c4ac83 100644 --- a/pom.xml +++ b/pom.xml @@ -739,7 +739,7 @@ <dependency> <groupId>org.codehaus.jettison</groupId> <artifactId>jettison</artifactId> - <version>1.5.1</version> + <version>1.5.3</version> </dependency> <dependency> <groupId>com.google.code.findbugs</groupId> diff --git a/tez-dag/src/main/java/org/apache/tez/dag/history/utils/DAGUtils.java b/tez-dag/src/main/java/org/apache/tez/dag/history/utils/DAGUtils.java index 77e7179c2..4c45e7410 100644 --- a/tez-dag/src/main/java/org/apache/tez/dag/history/utils/DAGUtils.java +++ b/tez-dag/src/main/java/org/apache/tez/dag/history/utils/DAGUtils.java @@ -111,7 +111,8 @@ public final class DAGUtils { return dagJson; } - public static JSONObject convertDataEventDependencyInfoToJSON(List<DataEventDependencyInfo> info) { + public static JSONObject convertDataEventDependencyInfoToJSON(List<DataEventDependencyInfo> info) + throws JSONException { return new JSONObject(convertDataEventDependecyInfoToATS(info)); } @@ -436,7 +437,7 @@ public final class DAGUtils { } public static JSONObject convertServicePluginToJSON( - ServicePluginInfo servicePluginInfo) { + ServicePluginInfo servicePluginInfo) throws JSONException { JSONObject jsonObject = new JSONObject(convertServicePluginToATSMap(servicePluginInfo)); return jsonObject; }