You are viewing a plain text version of this content. The canonical link for it is here.

Posted to jira@arrow.apache.org by "Matthew Topol (Jira)" <ji...@apache.org> on 2021/09/29 16:26:00 UTC

[jira] [Resolved] (ARROW-13023) [Go] Upgrade "text" dependency to mitigate CVE

     [ https://issues.apache.org/jira/browse/ARROW-13023?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Matthew Topol resolved ARROW-13023.
-----------------------------------
      Assignee: Matthew Topol
    Resolution: Fixed

Not sure when this was fixed, but I've checked the current go.mod/go.sum and output of `go mod graph` and we currently depend on v0.3.6 which is the recommended version of this dependency.

Resolving.

> [Go] Upgrade "text" dependency to mitigate CVE
> ----------------------------------------------
>
>                 Key: ARROW-13023
>                 URL: https://issues.apache.org/jira/browse/ARROW-13023
>             Project: Apache Arrow
>          Issue Type: Bug
>          Components: Go
>            Reporter: Wes McKinney
>            Assignee: Matthew Topol
>            Priority: Major
>
> See automated report https://github.com/apache/arrow/issues/10392



--
This message was sent by Atlassian Jira
(v8.3.4#803005)