Hello,

CVE-2019-14887
<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14887> is flagged
as a critical vulnerability in Wildfly 1.0.7.Final. It exists within:

   1. flink-azure-fs-hadoop
   
<https://github.com/apache/flink/blob/17b805bc9afcca8776a46c15c3785d9df067ec7e/flink-filesystems/flink-azure-fs-hadoop/src/main/resources/META-INF/NOTICE#L21>
   2. flink-s3-fs-hadoop
   
<https://github.com/apache/flink/blob/17b805bc9afcca8776a46c15c3785d9df067ec7e/flink-filesystems/flink-s3-fs-hadoop/src/main/resources/META-INF/NOTICE#L43>
   3. flink-s3-fs-presto
   
<https://github.com/apache/flink/blob/54679fd7ddba64e1edfecb5928d025e08a74def8/flink-filesystems/flink-s3-fs-presto/src/main/resources/META-INF/NOTICE#L57>

There is a fix for this CVE in Widlfly v1.0.10.Final. Can we create a Jira
and/or assist with upgrading to 1.0.10?

Thank you,
Razin

-- 
RAZIN BOUZAR
Senior Engineer - Monitoring Cloud | Salesforce
Mobile: 317-502-8995

<https://smart.salesforce.com/sig/rbouzar//us_mb/default/link.html>

Reply via email to