chore/CVE-2022-1471

[xeniape]

Description

Bump dependency versions which contain fixes for CVE-2022-1471

Definition of Done Checklist

• Not all of these items are applicable to all PRs, the author should update this template to only leave the boxes in that are relevant
• Please make sure all these things are done and tick the boxes

Tasks

Edit tasklist title

Beta Give feedback Tasklist Tasks, more options

• Rename
• Copy markdown
• Delete tasklist

Delete tasklist

Delete tasklist block?

Are you sure? All relationships in this tasklist will be removed.

Cancel Delete

1. Changes are OpenShift compatible

   Changes are OpenShift compatible
   Options

   • Convert to issue
   • Toggle completion
   • Rename
   • Remove
2. All added packages (via microdnf or otherwise) have a comment on why they are added

   All added packages (via microdnf or otherwise) have a comment on why they are added
   Options

   • Convert to issue
   • Toggle completion
   • Rename
   • Remove
3. Things not downloaded from Red Hat repositories should be mirrored in the Stackable repository and downloaded from there

   Things not downloaded from Red Hat repositories should be mirrored in the Stackable repository and downloaded from there
   Options

   • Convert to issue
   • Toggle completion
   • Rename
   • Remove
4. All packages should have (if available) signatures/hashes verified

   All packages should have (if available) signatures/hashes verified
   Options

   • Convert to issue
   • Toggle completion
   • Rename
   • Remove
5. Does your change affect an SBOM? Make sure to update all SBOMs

   Does your change affect an SBOM? Make sure to update all SBOMs
   Options

   • Convert to issue
   • Toggle completion
   • Rename
   • Remove
6. Add an entry to the CHANGELOG.md file

   Add an entry to the CHANGELOG.md file
   Options

   • Convert to issue
   • Toggle completion
   • Rename
   • Remove
7. Integration tests ran successfully

   Integration tests ran successfully
   Options

   • Convert to issue
   • Toggle completion
   • Rename
   • Remove

Add item to Tasks

TIP: Running integration tests with a new product image

The image can be built and uploaded to the kind cluster with the following commands:

bake --product <product> --image-version <stackable-image-version>
kind load docker-image <image-tagged-with-the-major-version> --name=<name-of-your-test-cluster>

See the output of bake to retrieve the image tag for <image-tagged-with-the-major-version>.

[lfrancke]

It looks good to me but I didn't run any tests.

[sbernauer]

FYI, Trino 447 removed support for Phoenix 5.1 (see https://trino.io/docs/current/release/release-447.html#phoenix-connector)