[jira] [Comment Edited] (FLINK-19783) Upgrade mesos to 1.7 or newer

["Robert Metzger (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/FLINK-19783?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17220732#comment-17220732 ] 

Robert Metzger edited comment on FLINK-19783 at 10/27/20, 3:37 PM:
-------------------------------------------------------------------

[~trohrmann] I haven't backported the version upgrade to 1.11.3 since we are jumping so many versions. Users of Mesos will need to upgrade to Flink 1.12 if they want to avoid this issue.
From a recent mailing list discussion, it seems that we have only one user on Mesos left.


was (Author: rmetzger):
[~trohrmann] I haven't backported the version upgrade to 1.11.3 since we are jumping so many versions.

> Upgrade mesos to 1.7 or newer
> -----------------------------
>
>                 Key: FLINK-19783
>                 URL: https://issues.apache.org/jira/browse/FLINK-19783
>             Project: Flink
>          Issue Type: Task
>          Components: Deployment / Mesos
>    Affects Versions: 1.12.0, 1.11.2
>            Reporter: Till Rohrmann
>            Assignee: Robert Metzger
>            Priority: Critical
>              Labels: pull-request-available
>             Fix For: 1.12.0
>
>
> A user reported a dependency vulnerability which affects {{mesos}} [1]. We should upgrade {{mesos}} to {{1.7.0}} or newer.
> [1] https://lists.apache.org/thread.html/r0dd7ff197b2e3bdd80a0326587ca3d0c22e10d1dba17c769d6da7d7a%40%3Cuser.flink.apache.org%3E



--
This message was sent by Atlassian Jira
(v8.3.4#803005)