You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@flink.apache.org by "Fabian Paul (Jira)" <ji...@apache.org> on 2022/01/11 15:13:00 UTC

[jira] [Commented] (FLINK-22602) Upgrade Parquet to 1.12.2

    [ https://issues.apache.org/jira/browse/FLINK-22602?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17472816#comment-17472816 ] 

Fabian Paul commented on FLINK-22602:
-------------------------------------

Merged in master: d7cf2c10f8d4fba81173854cbd8be27c657c7c7f

> Upgrade Parquet to 1.12.2
> -------------------------
>
>                 Key: FLINK-22602
>                 URL: https://issues.apache.org/jira/browse/FLINK-22602
>             Project: Flink
>          Issue Type: Bug
>          Components: Formats (JSON, Avro, Parquet, ORC, SequenceFile)
>    Affects Versions: 1.13.0, 1.12.3, 1.13.1
>            Reporter: Bo Cui
>            Priority: Critical
>              Labels: auto-deprioritized-major, pull-request-available
>             Fix For: 1.15.0
>
>
> We scanned jackson-databind&core for some vulnerabilities (CVE-2020-24616/CVE-2021-20190/CVE-2020-36184/CVE-2020-36183/CVE-2020-9546...). Apache Parquet depends on them, so we upgraded parquet to version 1.12.0.
>  
> parquet code link：https://github.com/apache/parquet-mr/blob/db75a6815f2ba1d1ee89d1a90aeb296f1f3a8f20/pom.xml#L78



--
This message was sent by Atlassian Jira
(v8.20.1#820001)