Fixes CVE-2024-7254 (#773)

* fixes CVE Signed-off-by: Gagan Juneja <[email protected]> * fixes CVE Signed-off-by: Gagan Juneja <[email protected]> --------- Signed-off-by: Gagan Juneja <[email protected]> Co-authored-by: Gagan Juneja <[email protected]>
opensearch-project · Dec 9, 2024 · b23f0c1 · b23f0c1
1 parent c1c079f
commit b23f0c1
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/build.gradle b/build.gradle
@@ -246,7 +246,7 @@ dependencies {
     compile(group: 'com.google.errorprone', name: 'error_prone_annotations', version: '2.9.0') {
         force = 'true'
     }
-    compile(group: 'com.google.protobuf', name:'protobuf-java', version: '3.21.8') {
+    compile(group: 'com.google.protobuf', name:'protobuf-java', version: '3.25.5') {
         force = 'true'
     }
     compile("io.netty:netty-buffer:${nettyVersion}") {

diff --git a/release-notes/opensearch-performance-analyzer.release-notes-1.3.20.0.md b/release-notes/opensearch-performance-analyzer.release-notes-1.3.20.0.md
@@ -0,0 +1,7 @@
+## Version 1.3.20 Release Notes
+
+Compatible with OpenSearch 1.3.20
+
+### Infrastructure
+
+* Upgrade protobuf version to 3.25.5 ([#773](https://github.com/opensearch-project/performance-analyzer/pull/773))