You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@flink.apache.org by "Márton Balassi (Jira)" <ji...@apache.org> on 2024/04/02 13:28:00 UTC

[jira] [Commented] (FLINK-34955) Upgrade commons-compress to 1.26.0

    [ https://issues.apache.org/jira/browse/FLINK-34955?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17833201#comment-17833201 ] 

Márton Balassi commented on FLINK-34955:
----------------------------------------

[163b9cc|https://github.com/apache/flink/commit/163b9cca6d2ccac0ff89dd985e3232667ddfb14f] in master, creating necessary backports.

> Upgrade commons-compress to 1.26.0
> ----------------------------------
>
>                 Key: FLINK-34955
>                 URL: https://issues.apache.org/jira/browse/FLINK-34955
>             Project: Flink
>          Issue Type: Improvement
>            Reporter: Shilun Fan
>            Assignee: Shilun Fan
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 1.18.2, 1.20.0, 1.19.1
>
>
> commons-compress 1.24.0 has CVE issues, try to upgrade to 1.26.0, we can refer to the maven link
> https://mvnrepository.com/artifact/org.apache.commons/commons-compress



--
This message was sent by Atlassian Jira
(v8.20.10#820010)