You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@flink.apache.org by "Till Rohrmann (Jira)" <ji...@apache.org> on 2020/10/23 08:49:00 UTC

[jira] [Created] (FLINK-19784) Upgrade okhttp to 3.13.0 or newer

Till Rohrmann created FLINK-19784:
-------------------------------------

             Summary: Upgrade okhttp to 3.13.0 or newer
                 Key: FLINK-19784
                 URL: https://issues.apache.org/jira/browse/FLINK-19784
             Project: Flink
          Issue Type: Task
          Components: Runtime / Metrics
    Affects Versions: 1.11.2, 1.12.0
            Reporter: Till Rohrmann
             Fix For: 1.12.0, 1.11.3


A user reported a dependency vulnerability which affects {{okhttp}} [1]. We should upgrade this dependency to {{3.13.0}} or newer. The dependency is used by the datadog reporter.

[1] https://lists.apache.org/thread.html/r0dd7ff197b2e3bdd80a0326587ca3d0c22e10d1dba17c769d6da7d7a%40%3Cuser.flink.apache.org%3E



--
This message was sent by Atlassian Jira
(v8.3.4#803005)