You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@flink.apache.org by "Ryan Skraba (Jira)" <ji...@apache.org> on 2023/11/23 09:59:00 UTC

[jira] [Closed] (FLINK-33149) Bump snappy-java to 1.1.10.4

     [ https://issues.apache.org/jira/browse/FLINK-33149?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ryan Skraba closed FLINK-33149.
-------------------------------
    Resolution: Fixed

> Bump snappy-java to 1.1.10.4
> ----------------------------
>
>                 Key: FLINK-33149
>                 URL: https://issues.apache.org/jira/browse/FLINK-33149
>             Project: Flink
>          Issue Type: Bug
>          Components: API / Core, Connectors / AWS, Connectors / HBase, Connectors / Kafka, Stateful Functions
>    Affects Versions: 1.18.0, 1.16.3, 1.17.2
>            Reporter: Ryan Skraba
>            Assignee: Ryan Skraba
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: kafka-4.0.0, 1.16.3, 1.17.2, 1.18.0
>
>
> Xerial published a security alert for a Denial of Service attack that [exists on 1.1.10.1|https://github.com/xerial/snappy-java/security/advisories/GHSA-55g7-9cwv-5qfv].
> This is included in flink-dist, but also in flink-statefun, and several connectors.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)