[FLINK-33149] Bump snappy-java to 1.1.10.4 - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Technical Debt
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: 1.18.0, 1.16.3, 1.17.2
Fix Version/s: 1.18.0, kafka-3.1.0, 1.16.3, 1.17.2
Component/s: API / Core, Connectors / AWS, Connectors / HBase, Connectors / Kafka, Stateful Functions
Labels:
- pull-request-available

Description

Xerial published a security alert for a Denial of Service attack that exists on 1.1.10.1.

This is included in flink-dist, but also in flink-statefun, and several connectors.

Attachments

Issue Links

links to

GitHub Pull Request #34

GitHub Pull Request #341

GitHub Pull Request #23458

GitHub Pull Request #23459

GitHub Pull Request #23460

GitHub Pull Request #23461

(1 links to)

Activity

People

Assignee:: Ryan Skraba

Reporter:: Ryan Skraba

Votes:: 0 Vote for this issue

Watchers:: 5 Start watching this issue

Dates

Created:: 25/Sep/23 08:18

Updated:: 26/Jan/24 12:56

Resolved:: 23/Nov/23 09:58