From b60e576eafba864fe3269a465b2d547e1ef056b9 Mon Sep 17 00:00:00 2001
From: Warren Zhu <warren.zhu25@gmail.com>
Date: Wed, 29 Sep 2021 21:49:22 -0700
Subject: [PATCH] [SPARK-36893][BUILD][MESOS] Upgrade mesos into 1.4.3

### What changes were proposed in this pull request?
Upgrade mesos into 1.4.3

### Why are the changes needed?
Fix CVE-2018-11793

### Does this PR introduce _any_ user-facing change?
No

### How was this patch tested?
Manually

Closes #34144 from warrenzhu25/mesos.

Authored-by: Warren Zhu <warren.zhu25@gmail.com>
Signed-off-by: Dongjoon Hyun <dongjoon@apache.org>
---
 dev/deps/spark-deps-hadoop-2.7-hive-2.3 | 2 +-
 dev/deps/spark-deps-hadoop-3.2-hive-2.3 | 2 +-
 resource-managers/mesos/pom.xml         | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/dev/deps/spark-deps-hadoop-2.7-hive-2.3 b/dev/deps/spark-deps-hadoop-2.7-hive-2.3
index b903335ca5..94a4758fec 100644
--- a/dev/deps/spark-deps-hadoop-2.7-hive-2.3
+++ b/dev/deps/spark-deps-hadoop-2.7-hive-2.3
@@ -190,7 +190,7 @@ log4j/1.2.17//log4j-1.2.17.jar
 logging-interceptor/3.12.12//logging-interceptor-3.12.12.jar
 lz4-java/1.8.0//lz4-java-1.8.0.jar
 macro-compat_2.12/1.1.1//macro-compat_2.12-1.1.1.jar
-mesos/1.4.0/shaded-protobuf/mesos-1.4.0-shaded-protobuf.jar
+mesos/1.4.3/shaded-protobuf/mesos-1.4.3-shaded-protobuf.jar
 metrics-core/4.2.2//metrics-core-4.2.2.jar
 metrics-graphite/4.2.2//metrics-graphite-4.2.2.jar
 metrics-jmx/4.2.2//metrics-jmx-4.2.2.jar
diff --git a/dev/deps/spark-deps-hadoop-3.2-hive-2.3 b/dev/deps/spark-deps-hadoop-3.2-hive-2.3
index a53c7defc4..091f399a6a 100644
--- a/dev/deps/spark-deps-hadoop-3.2-hive-2.3
+++ b/dev/deps/spark-deps-hadoop-3.2-hive-2.3
@@ -177,7 +177,7 @@ log4j/1.2.17//log4j-1.2.17.jar
 logging-interceptor/3.12.12//logging-interceptor-3.12.12.jar
 lz4-java/1.8.0//lz4-java-1.8.0.jar
 macro-compat_2.12/1.1.1//macro-compat_2.12-1.1.1.jar
-mesos/1.4.0/shaded-protobuf/mesos-1.4.0-shaded-protobuf.jar
+mesos/1.4.3/shaded-protobuf/mesos-1.4.3-shaded-protobuf.jar
 metrics-core/4.2.2//metrics-core-4.2.2.jar
 metrics-graphite/4.2.2//metrics-graphite-4.2.2.jar
 metrics-jmx/4.2.2//metrics-jmx-4.2.2.jar
diff --git a/resource-managers/mesos/pom.xml b/resource-managers/mesos/pom.xml
index b69af9b163..9d44804c21 100644
--- a/resource-managers/mesos/pom.xml
+++ b/resource-managers/mesos/pom.xml
@@ -29,7 +29,7 @@
   <name>Spark Project Mesos</name>
   <properties>
     <sbt.project.name>mesos</sbt.project.name>
-    <mesos.version>1.4.0</mesos.version>
+    <mesos.version>1.4.3</mesos.version>
     <mesos.classifier>shaded-protobuf</mesos.classifier>
   </properties>