From 7fecb92fc2cfdcc74379260a5d09ba625aa0811b Mon Sep 17 00:00:00 2001
From: PJ Fanning <pjfanning@users.noreply.github.com>
Date: Wed, 20 Apr 2022 11:14:47 +0200
Subject: [PATCH] use secure version of postgresql (#9573)

* use secure version of postgresql

* Update known-dependencies.txt
---
 dolphinscheduler-dist/release-docs/LICENSE | 2 +-
 pom.xml                                    | 2 +-
 tools/dependencies/known-dependencies.txt  | 3 ++-
 3 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/dolphinscheduler-dist/release-docs/LICENSE b/dolphinscheduler-dist/release-docs/LICENSE
index 48d5833172..beb3243cb5 100644
--- a/dolphinscheduler-dist/release-docs/LICENSE
+++ b/dolphinscheduler-dist/release-docs/LICENSE
@@ -465,7 +465,7 @@ The text of each license is also included at licenses/LICENSE-[project].txt.
     jline 0.9.94: https://github.com/jline/jline3, BSD
     jsch 0.1.42: https://mvnrepository.com/artifact/com.jcraft/jsch/0.1.42, BSD
     leveldbjni-all 1.8: https://github.com/fusesource/leveldbjni, BSD-3-Clause
-    postgresql 42.2.5: https://mvnrepository.com/artifact/org.postgresql/postgresql/42.2.5, BSD 2-clause
+    postgresql 42.3.4: https://mvnrepository.com/artifact/org.postgresql/postgresql/42.3.4, BSD 2-clause
     protobuf-java 2.5.0: https://mvnrepository.com/artifact/com.google.protobuf/protobuf-java/2.5.0, BSD 2-clause
     paranamer 2.3: https://mvnrepository.com/artifact/com.thoughtworks.paranamer/paranamer/2.3, BSD
     threetenbp 1.3.6: https://mvnrepository.com/artifact/org.threeten/threetenbp/1.3.6,  BSD 3-clause
diff --git a/pom.xml b/pom.xml
index bffe995cc8..13f67fad2e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -83,7 +83,7 @@
         <javax.servlet.api.version>3.1.0</javax.servlet.api.version>
         <commons.collections4.version>4.1</commons.collections4.version>
         <guava.version>24.1-jre</guava.version>
-        <postgresql.version>42.2.5</postgresql.version>
+        <postgresql.version>42.3.4</postgresql.version>
         <hive.jdbc.version>2.1.0</hive.jdbc.version>
         <commons.io.version>2.4</commons.io.version>
         <oshi.core.version>6.1.1</oshi.core.version>
diff --git a/tools/dependencies/known-dependencies.txt b/tools/dependencies/known-dependencies.txt
index b2fe6e8a83..cafcf8ca1b 100755
--- a/tools/dependencies/known-dependencies.txt
+++ b/tools/dependencies/known-dependencies.txt
@@ -18,6 +18,7 @@ byte-buddy-1.9.16.jar
 caffeine-2.9.2.jar
 checker-compat-qual-2.0.0.jar
 checker-qual-3.10.0.jar
+checker-qual-3.5.0.jar
 classmate-1.5.1.jar
 clickhouse-jdbc-0.1.52.jar
 commons-email-1.5.jar
@@ -173,7 +174,7 @@ parquet-hadoop-bundle-1.8.1.jar
 poi-4.1.2.jar
 poi-ooxml-4.1.2.jar
 poi-ooxml-schemas-4.1.2.jar
-postgresql-42.2.5.jar
+postgresql-42.3.4.jar
 presto-jdbc-0.238.1.jar
 protobuf-java-2.5.0.jar
 protostuff-core-1.7.2.jar