You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@flink.apache.org by "Kartik Goyal (Jira)" <ji...@apache.org> on 2024/10/14 10:36:00 UTC

[jira] [Created] (FLINK-36528) Update org.apache.avro : avro dependency

Kartik Goyal created FLINK-36528:
------------------------------------

             Summary: Update org.apache.avro : avro dependency
                 Key: FLINK-36528
                 URL: https://issues.apache.org/jira/browse/FLINK-36528
             Project: Flink
          Issue Type: Improvement
          Components: Kubernetes Operator
    Affects Versions: kubernetes-operator-1.10.0
            Reporter: Kartik Goyal
            Assignee: Kartik Goyal
             Fix For: kubernetes-operator-1.10.0


Bump the mysql-connector-j version to remediate vulnerability associated with this package.

Package info:
[https://mvnrepository.com/artifact/com.mysql/mysql-connector-j/8.0.33] 

Vulnerability info:
[https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22102]

Proposed change solution:
Bump the version from 8.0.33 to 8.4.0



--
This message was sent by Atlassian Jira
(v8.20.10#820010)