Backport to branch(3.11) : Fix CVE-2024-7254, CVE-2024-25638, and CVE-2024-34156 (#2279)

Co-authored-by: Toshihiro <[email protected]>

Author: feeblefakie

build.gradle

@@ -34,11 +34,11 @@ subprojects {
         oracleDriverVersion = '21.11.0.0'
         sqlserverDriverVersion = '11.2.3.jre8'
         sqliteDriverVersion = '3.44.1.0'
-        grpcVersion = '1.60.0'
-        protobufVersion = '3.21.12'
+        grpcVersion = '1.67.1'
+        protobufVersion = '3.25.5'
         annotationVersion = '1.3.2'
         picocliVersion = '4.7.5'
-        scalarAdminVersion = '2.1.2'
+        scalarAdminVersion = '2.2.1'
         dropwizardMetricsVersion = '4.2.23'
         prometheusVersion = '0.16.0'
         commonsTextVersion = '1.11.0'

rpc/build.gradle

@@ -10,6 +10,7 @@ dependencies {
     api "io.grpc:grpc-protobuf:${grpcVersion}"
     api "io.grpc:grpc-stub:${grpcVersion}"
     api "io.grpc:grpc-services:${grpcVersion}"
+    implementation "com.google.protobuf:protobuf-java:${protobufVersion}"
     implementation "javax.annotation:javax.annotation-api:${annotationVersion}"
 }
 

rpc/src/main/grpc/com/scalar/db/rpc/DistributedStorageAdminGrpc.java

@@ -5,7 +5,7 @@
 /**
  */
 @javax.annotation.Generated(
-    value = "by gRPC proto compiler (version 1.60.0)",
+    value = "by gRPC proto compiler (version 1.67.1)",
     comments = "Source: scalardb.proto")
 @io.grpc.stub.annotations.GrpcGenerated
 public final class DistributedStorageAdminGrpc {

rpc/src/main/grpc/com/scalar/db/rpc/DistributedStorageGrpc.java

@@ -5,7 +5,7 @@
 /**
  */
 @javax.annotation.Generated(
-    value = "by gRPC proto compiler (version 1.60.0)",
+    value = "by gRPC proto compiler (version 1.67.1)",
     comments = "Source: scalardb.proto")
 @io.grpc.stub.annotations.GrpcGenerated
 public final class DistributedStorageGrpc {

rpc/src/main/grpc/com/scalar/db/rpc/DistributedTransactionAdminGrpc.java

@@ -5,7 +5,7 @@
 /**
  */
 @javax.annotation.Generated(
-    value = "by gRPC proto compiler (version 1.60.0)",
+    value = "by gRPC proto compiler (version 1.67.1)",
     comments = "Source: scalardb.proto")
 @io.grpc.stub.annotations.GrpcGenerated
 public final class DistributedTransactionAdminGrpc {

rpc/src/main/grpc/com/scalar/db/rpc/DistributedTransactionGrpc.java

@@ -5,7 +5,7 @@
 /**
  */
 @javax.annotation.Generated(
-    value = "by gRPC proto compiler (version 1.60.0)",
+    value = "by gRPC proto compiler (version 1.67.1)",
     comments = "Source: scalardb.proto")
 @io.grpc.stub.annotations.GrpcGenerated
 public final class DistributedTransactionGrpc {

rpc/src/main/grpc/com/scalar/db/rpc/TwoPhaseCommitTransactionGrpc.java

@@ -5,7 +5,7 @@
 /**
  */
 @javax.annotation.Generated(
-    value = "by gRPC proto compiler (version 1.60.0)",
+    value = "by gRPC proto compiler (version 1.67.1)",
     comments = "Source: scalardb.proto")
 @io.grpc.stub.annotations.GrpcGenerated
 public final class TwoPhaseCommitTransactionGrpc {