Hey JB, Late to the party here, but 1.4.3 sounds like a great idea. Let me know if you need any help with any release steps.
Kind regards, Fokko Driesprong Op ma 20 nov 2023 om 08:16 schreef Jean-Baptiste Onofré <j...@nanthrax.net>: > Hi > > As there's no objection, I will move forward and prepare the release to > vote. > > I will keep you posted asap. > > Thanks, > Regards > JB > > On Wed, Nov 15, 2023 at 6:11 AM Jean-Baptiste Onofré <j...@nanthrax.net> > wrote: > > > > Hi guys, > > > > Avro 1.11.3 has been released, fixing CVE-2023-39410. > > We already updated to Avro 1.11.3 on main. > > > > About CVE, we also already use guava 32.1.3, fixing CVE-2023-2976. > > > > As the Avro CVE is classified high (see > > https://nvd.nist.gov/vuln/detail/CVE-2023-39410), I propose to bump to > > Avro 1.11.3 on our 1.4.x branch and release Iceberg 1.4.3 including > > this. > > > > Thoughts ? > > > > If there are no objections, I'm volunteer to drive this release. > > > > Thanks, > > Regards > > JB >
