[jira] [Closed] (FLINK-31815) Fixing the container vulnerability by upgrade the SnakeYaml Maven dependency

["Gyula Fora (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/FLINK-31815?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Gyula Fora closed FLINK-31815.
------------------------------
    Resolution: Fixed

From the operator side this is now fixed in f23e38d6505e68535906cd6a7d77ca94fa1758e0.

We still pull the old snakeyaml for flink standalone due to the old flink fabric8 usage.
That has to be fixed as part of: https://issues.apache.org/jira/browse/FLINK-31997

> Fixing the container vulnerability by upgrade the SnakeYaml Maven dependency
> ----------------------------------------------------------------------------
>
>                 Key: FLINK-31815
>                 URL: https://issues.apache.org/jira/browse/FLINK-31815
>             Project: Flink
>          Issue Type: Improvement
>          Components: Kubernetes Operator
>    Affects Versions: kubernetes-operator-1.5.0
>            Reporter: Jeff Yang
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: kubernetes-operator-1.5.0
>
>
> _Fix the container vulnerability, here is [cve|https://github.com/advisories/GHSA-mjmj-j48q-9wg2]._



--
This message was sent by Atlassian Jira
(v8.20.10#820010)