[KUDU-3494] Protobuf CVE CVE-2022-3510 - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Bug
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: 1.16.0
Fix Version/s: 1.17.0, 1.16.1
Component/s: None
Labels:
None

Description

There is a CVE in protobuf 3.19.3 https://github.com/apache/kudu/blob/5659541d15c5490d25ca207c4f63b249986fbfe6/java/gradle/dependencies.gradle#L54

https://nvd.nist.gov/vuln/detail/CVE-2022-3509

https://nvd.nist.gov/vuln/detail/CVE-2022-3510

Please update to 3.19.6.

Attachments

Activity

People

Assignee:: Unassigned

Reporter:: Colm O hEigeartaigh

Votes:: 0 Vote for this issue

Watchers:: 4 Start watching this issue

Dates

Created:: 19/Jul/23 09:45

Updated:: 26/Jul/23 00:32

Resolved:: 26/Jul/23 00:32