[jira] [Commented] (DRILL-7994) Dependency version updates for severe vulnerabilities

["ASF GitHub Bot (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/DRILL-7994?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17479408#comment-17479408 ] 

ASF GitHub Bot commented on DRILL-7994:
---------------------------------------

jnturton commented on pull request #2308:
URL: https://github.com/apache/drill/pull/2308#issuecomment-1017566899


   I've picked this and some other dependency updates up in #2432.  Closing this in favour of that.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@drill.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


> Dependency version updates for severe vulnerabilities
> -----------------------------------------------------
>
>                 Key: DRILL-7994
>                 URL: https://issues.apache.org/jira/browse/DRILL-7994
>             Project: Apache Drill
>          Issue Type: Task
>          Components: Security
>    Affects Versions: 1.19.0
>            Reporter: Charles Givre
>            Assignee: James Turton
>            Priority: Major
>             Fix For: 1.20.0
>
>         Attachments: dependency-check-report.html
>
>
> Dependency updates based on severe vulnerabilities reported by the OWASP dependency check.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)