[
https://issues.apache.org/jira/browse/FLINK-36593?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17903216#comment-17903216
]
Sergey Nuyanzin commented on FLINK-36593:
-----------------------------------------
Merged to 1.20 as
[4e5ef6695ce226102552686adbf7d2b8dbc5c111|https://github.com/apache/flink/commit/4e5ef6695ce226102552686adbf7d2b8dbc5c111]
> Upgrade io.airlift:aircompressor to mitigate CVE
> ------------------------------------------------
>
> Key: FLINK-36593
> URL: https://issues.apache.org/jira/browse/FLINK-36593
> Project: Flink
> Issue Type: Improvement
> Components: API / Core
> Affects Versions: 2.0-preview
> Reporter: Thomas Cooper
> Assignee: Thomas Cooper
> Priority: Major
> Labels: pull-request-available
> Fix For: 2.0.0
>
>
> The current version of the aircompressor library (0.21), used in the
> flink-runtime module, has a vulnerability:
> [CVE-2024-36114|https://nvd.nist.gov/vuln/detail/CVE-2024-36114].
> This can be mitigated by upgrading to version 0.27 of the library.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
