[
https://issues.apache.org/jira/browse/FLINK-36593?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17909918#comment-17909918
]
Alexander Fedulov edited comment on FLINK-36593 at 1/5/25 3:59 PM:
-------------------------------------------------------------------
{*}Merged to 1.19{*}: ff4243a7b4c25dd87d7d9a494f17eb358722a589
was (Author: afedulov):
Merged to 1.19: ff4243a7b4c25dd87d7d9a494f17eb358722a589
> Upgrade io.airlift:aircompressor to mitigate CVE
> ------------------------------------------------
>
> Key: FLINK-36593
> URL: https://issues.apache.org/jira/browse/FLINK-36593
> Project: Flink
> Issue Type: Improvement
> Components: API / Core
> Affects Versions: 2.0-preview
> Reporter: Thomas Cooper
> Assignee: Thomas Cooper
> Priority: Major
> Labels: pull-request-available
> Fix For: 2.0.0, 1.19.2, 1.20.1
>
>
> The current version of the aircompressor library (0.21), used in the
> flink-runtime module, has a vulnerability:
> [CVE-2024-36114|https://nvd.nist.gov/vuln/detail/CVE-2024-36114].
> This can be mitigated by upgrading to version 0.27 of the library.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
