From f82da57277c825d4588a6a0654b7730d333a5b18 Mon Sep 17 00:00:00 2001
From: didiaode18 <563646039@qq.com>
Date: Tue, 20 Apr 2021 15:04:29 +0800
Subject: [PATCH] There is a vulnerability in postgresql 42.1.4 ,upgrade
 recommended #5292 (#5318)

* There is a vulnerability in postgresql 42.1.4 ,upgrade recommended #5292
---
 dolphinscheduler-dist/release-docs/LICENSE | 2 +-
 pom.xml                                    | 2 +-
 tools/dependencies/known-dependencies.txt  | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/dolphinscheduler-dist/release-docs/LICENSE b/dolphinscheduler-dist/release-docs/LICENSE
index eb7399740f..ae2af97f27 100644
--- a/dolphinscheduler-dist/release-docs/LICENSE
+++ b/dolphinscheduler-dist/release-docs/LICENSE
@@ -425,7 +425,7 @@ The text of each license is also included at licenses/LICENSE-[project].txt.
     jline 0.9.94: https://github.com/jline/jline3, BSD
     jsch 0.1.42: https://mvnrepository.com/artifact/com.jcraft/jsch/0.1.42, BSD
     leveldbjni-all 1.8: https://github.com/fusesource/leveldbjni, BSD-3-Clause
-    postgresql 42.1.4: https://mvnrepository.com/artifact/org.postgresql/postgresql/42.1.4, BSD 2-clause
+    postgresql 42.2.5: https://mvnrepository.com/artifact/org.postgresql/postgresql/42.2.5, BSD 2-clause
     protobuf-java 2.5.0: https://mvnrepository.com/artifact/com.google.protobuf/protobuf-java/2.5.0, BSD 2-clause
     paranamer 2.3: https://mvnrepository.com/artifact/com.thoughtworks.paranamer/paranamer/2.3, BSD
     threetenbp 1.3.6: https://mvnrepository.com/artifact/org.threeten/threetenbp/1.3.6,  BSD 3-clause
diff --git a/pom.xml b/pom.xml
index 0dc651fd37..3be973330d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -89,7 +89,7 @@
         <javax.servlet.api.version>3.1.0</javax.servlet.api.version>
         <commons.collections4.version>4.1</commons.collections4.version>
         <guava.version>24.1-jre</guava.version>
-        <postgresql.version>42.1.4</postgresql.version>
+        <postgresql.version>42.2.5</postgresql.version>
         <hive.jdbc.version>2.1.0</hive.jdbc.version>
         <commons.io.version>2.4</commons.io.version>
         <oshi.core.version>3.9.1</oshi.core.version>
diff --git a/tools/dependencies/known-dependencies.txt b/tools/dependencies/known-dependencies.txt
index d403b16910..14d167481c 100755
--- a/tools/dependencies/known-dependencies.txt
+++ b/tools/dependencies/known-dependencies.txt
@@ -190,7 +190,7 @@ plexus-interpolation-1.14.jar
 plexus-sec-dispatcher-1.3.jar
 plexus-utils-2.0.6.jar
 poi-3.17.jar
-postgresql-42.1.4.jar
+postgresql-42.2.5.jar
 presto-jdbc-0.238.1.jar
 protobuf-java-2.5.0.jar
 protostuff-core-1.7.2.jar