This is an automated email from the ASF dual-hosted git repository.

chesnay pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/flink-web.git


The following commit(s) were added to refs/heads/asf-site by this push:
     new a2070da  Add 1.11.6/1.12.7/1.13.5/1.14.2 releases
a2070da is described below

commit a2070da0c1d457bdcae668f23aefe9f774fec540
Author: Chesnay Schepler <[email protected]>
AuthorDate: Thu Dec 16 18:12:09 2021 +0100

    Add 1.11.6/1.12.7/1.13.5/1.14.2 releases
---
 _config.yml                               | 131 +++++++++++++++++++-----------
 _posts/2021-12-10-log4j-cve.md            |   5 ++
 _posts/2021-12-16-log4j-patch-releases.md |  42 ++++++++++
 q/gradle-quickstart.sh                    |   2 +-
 q/quickstart-scala.sh                     |   2 +-
 q/quickstart.sh                           |   2 +-
 q/sbt-quickstart.sh                       |   2 +-
 7 files changed, 135 insertions(+), 51 deletions(-)

diff --git a/_config.yml b/_config.yml
index 9810eb8..a4784cd 100644
--- a/_config.yml
+++ b/_config.yml
@@ -9,7 +9,7 @@ url: https://flink.apache.org
 
 DOCS_BASE_URL: https://nightlies.apache.org/flink/
 
-FLINK_VERSION_STABLE: 1.14.0
+FLINK_VERSION_STABLE: 1.14.2
 FLINK_VERSION_STABLE_SHORT: "1.14"
 
 FLINK_ISSUES_URL: https://issues.apache.org/jira/browse/FLINK
@@ -58,75 +58,96 @@ flink_releases:
   -
     version_short: "1.14"
     binary_release:
-      name: "Apache Flink 1.14.0"
+      name: "Apache Flink 1.14.2"
       scala_211:
-        id: "1140-download_211"
-        url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.14.0/flink-1.14.0-bin-scala_2.11.tgz";
-        asc_url: 
"https://downloads.apache.org/flink/flink-1.14.0/flink-1.14.0-bin-scala_2.11.tgz.asc";
-        sha512_url: 
"https://downloads.apache.org/flink/flink-1.14.0/flink-1.14.0-bin-scala_2.11.tgz.sha512";
+        id: "1142-download_211"
+        url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.14.2/flink-1.14.2-bin-scala_2.11.tgz";
+        asc_url: 
"https://downloads.apache.org/flink/flink-1.14.2/flink-1.14.2-bin-scala_2.11.tgz.asc";
+        sha512_url: 
"https://downloads.apache.org/flink/flink-1.14.2/flink-1.14.2-bin-scala_2.11.tgz.sha512";
       scala_212:
-        id: "1140-download_212"
-        url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.14.0/flink-1.14.0-bin-scala_2.12.tgz";
-        asc_url: 
"https://downloads.apache.org/flink/flink-1.14.0/flink-1.14.0-bin-scala_2.12.tgz.asc";
-        sha512_url: 
"https://downloads.apache.org/flink/flink-1.14.0/flink-1.14.0-bin-scala_2.12.tgz.sha512";
+        id: "1142-download_212"
+        url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.14.2/flink-1.14.2-bin-scala_2.12.tgz";
+        asc_url: 
"https://downloads.apache.org/flink/flink-1.14.2/flink-1.14.2-bin-scala_2.12.tgz.asc";
+        sha512_url: 
"https://downloads.apache.org/flink/flink-1.14.2/flink-1.14.2-bin-scala_2.12.tgz.sha512";
     source_release:
-      name: "Apache Flink 1.14.0"
-      id: "1140-download-source"
-      url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.14.0/flink-1.14.0-src.tgz";
-      asc_url: 
"https://downloads.apache.org/flink/flink-1.14.0/flink-1.14.0-src.tgz.asc";
-      sha512_url: 
"https://downloads.apache.org/flink/flink-1.14.0/flink-1.14.0-src.tgz.sha512";
+      name: "Apache Flink 1.14.2"
+      id: "1142-download-source"
+      url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.14.2/flink-1.14.2-src.tgz";
+      asc_url: 
"https://downloads.apache.org/flink/flink-1.14.2/flink-1.14.2-src.tgz.asc";
+      sha512_url: 
"https://downloads.apache.org/flink/flink-1.14.2/flink-1.14.2-src.tgz.sha512";
     release_notes_url: 
"https://nightlies.apache.org/flink/flink-docs-release-1.14/release-notes/flink-1.14";
   -
     version_short: "1.13"
     binary_release:
-      name: "Apache Flink 1.13.3"
+      name: "Apache Flink 1.13.5"
       scala_211:
-        id: "1133-download_211"
-        url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.13.3/flink-1.13.3-bin-scala_2.11.tgz";
-        asc_url: 
"https://downloads.apache.org/flink/flink-1.13.3/flink-1.13.3-bin-scala_2.11.tgz.asc";
-        sha512_url: 
"https://downloads.apache.org/flink/flink-1.13.3/flink-1.13.3-bin-scala_2.11.tgz.sha512";
+        id: "1135-download_211"
+        url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.13.5/flink-1.13.5-bin-scala_2.11.tgz";
+        asc_url: 
"https://downloads.apache.org/flink/flink-1.13.5/flink-1.13.5-bin-scala_2.11.tgz.asc";
+        sha512_url: 
"https://downloads.apache.org/flink/flink-1.13.5/flink-1.13.5-bin-scala_2.11.tgz.sha512";
       scala_212:
-        id: "1133-download_212"
-        url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.13.3/flink-1.13.3-bin-scala_2.12.tgz";
-        asc_url: 
"https://downloads.apache.org/flink/flink-1.13.3/flink-1.13.3-bin-scala_2.12.tgz.asc";
-        sha512_url: 
"https://downloads.apache.org/flink/flink-1.13.3/flink-1.13.3-bin-scala_2.12.tgz.sha512";
+        id: "1135-download_212"
+        url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.13.5/flink-1.13.5-bin-scala_2.12.tgz";
+        asc_url: 
"https://downloads.apache.org/flink/flink-1.13.5/flink-1.13.5-bin-scala_2.12.tgz.asc";
+        sha512_url: 
"https://downloads.apache.org/flink/flink-1.13.5/flink-1.13.5-bin-scala_2.12.tgz.sha512";
     source_release:
-      name: "Apache Flink 1.13.3"
-      id: "1133-download-source"
-      url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.13.3/flink-1.13.3-src.tgz";
-      asc_url: 
"https://downloads.apache.org/flink/flink-1.13.3/flink-1.13.3-src.tgz.asc";
-      sha512_url: 
"https://downloads.apache.org/flink/flink-1.13.3/flink-1.13.3-src.tgz.sha512";
+      name: "Apache Flink 1.13.5"
+      id: "1135-download-source"
+      url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.13.5/flink-1.13.5-src.tgz";
+      asc_url: 
"https://downloads.apache.org/flink/flink-1.13.5/flink-1.13.5-src.tgz.asc";
+      sha512_url: 
"https://downloads.apache.org/flink/flink-1.13.5/flink-1.13.5-src.tgz.sha512";
     release_notes_url: 
"https://nightlies.apache.org/flink/flink-docs-release-1.13/release-notes/flink-1.13";
   -
     version_short: "1.12"
     binary_release:
-      name: "Apache Flink 1.12.5"
+      name: "Apache Flink 1.12.7"
       scala_211:
-        id: "1125-download_211"
-        url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.12.5/flink-1.12.5-bin-scala_2.11.tgz";
-        asc_url: 
"https://downloads.apache.org/flink/flink-1.12.5/flink-1.12.5-bin-scala_2.11.tgz.asc";
-        sha512_url: 
"https://downloads.apache.org/flink/flink-1.12.5/flink-1.12.5-bin-scala_2.11.tgz.sha512";
+        id: "1127-download_211"
+        url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.12.7/flink-1.12.7-bin-scala_2.11.tgz";
+        asc_url: 
"https://downloads.apache.org/flink/flink-1.12.7/flink-1.12.7-bin-scala_2.11.tgz.asc";
+        sha512_url: 
"https://downloads.apache.org/flink/flink-1.12.7/flink-1.12.7-bin-scala_2.11.tgz.sha512";
       scala_212:
-        id: "1125-download_212"
-        url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.12.5/flink-1.12.5-bin-scala_2.12.tgz";
-        asc_url: 
"https://downloads.apache.org/flink/flink-1.12.5/flink-1.12.5-bin-scala_2.12.tgz.asc";
-        sha512_url: 
"https://downloads.apache.org/flink/flink-1.12.5/flink-1.12.5-bin-scala_2.12.tgz.sha512";
+        id: "1127-download_212"
+        url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.12.7/flink-1.12.7-bin-scala_2.12.tgz";
+        asc_url: 
"https://downloads.apache.org/flink/flink-1.12.7/flink-1.12.7-bin-scala_2.12.tgz.asc";
+        sha512_url: 
"https://downloads.apache.org/flink/flink-1.12.7/flink-1.12.7-bin-scala_2.12.tgz.sha512";
     source_release:
-      name: "Apache Flink 1.12.5"
-      id: "1125-download-source"
-      url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.12.5/flink-1.12.5-src.tgz";
-      asc_url: 
"https://downloads.apache.org/flink/flink-1.12.5/flink-1.12.5-src.tgz.asc";
-      sha512_url: 
"https://downloads.apache.org/flink/flink-1.12.5/flink-1.12.5-src.tgz.sha512";
+      name: "Apache Flink 1.12.7"
+      id: "1127-download-source"
+      url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.12.7/flink-1.12.7-src.tgz";
+      asc_url: 
"https://downloads.apache.org/flink/flink-1.12.7/flink-1.12.7-src.tgz.asc";
+      sha512_url: 
"https://downloads.apache.org/flink/flink-1.12.7/flink-1.12.7-src.tgz.sha512";
     release_notes_url: 
"https://nightlies.apache.org/flink/flink-docs-release-1.12/release-notes/flink-1.12.html";
     optional_components:
       -
         name: "Avro SQL Format"
         category: "SQL Formats"
         scala_dependent: false
-        id: 1125-sql-format-avro
-        url: 
https://repo.maven.apache.org/maven2/org/apache/flink/flink-avro/1.12.5/flink-avro-1.12.5.jar
-        asc_url: 
https://repo.maven.apache.org/maven2/org/apache/flink/flink-avro/1.12.5/flink-avro-1.12.5.jar.asc
-        sha_url: 
https://repo.maven.apache.org/maven2/org/apache/flink/flink-avro/1.12.5/flink-avro-1.12.5.jar.sha1
+        id: 1127-sql-format-avro
+        url: 
https://repo.maven.apache.org/maven2/org/apache/flink/flink-avro/1.12.7/flink-avro-1.12.7.jar
+        asc_url: 
https://repo.maven.apache.org/maven2/org/apache/flink/flink-avro/1.12.7/flink-avro-1.12.7.jar.asc
+        sha_url: 
https://repo.maven.apache.org/maven2/org/apache/flink/flink-avro/1.12.7/flink-avro-1.12.7.jar.sha1
+  -
+    version_short: "1.11"
+    binary_release:
+      name: "Apache Flink 1.11.6"
+      scala_211:
+        id: "1116-download_211"
+        url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.11.6/flink-1.11.6-bin-scala_2.11.tgz";
+        asc_url: 
"https://downloads.apache.org/flink/flink-1.11.6/flink-1.11.6-bin-scala_2.11.tgz.asc";
+        sha512_url: 
"https://downloads.apache.org/flink/flink-1.11.6/flink-1.11.6-bin-scala_2.11.tgz.sha512";
+      scala_212:
+        id: "1116-download_212"
+        url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.11.6/flink-1.11.6-bin-scala_2.12.tgz";
+        asc_url: 
"https://downloads.apache.org/flink/flink-1.11.6/flink-1.11.6-bin-scala_2.12.tgz.asc";
+        sha512_url: 
"https://downloads.apache.org/flink/flink-1.11.6/flink-1.11.6-bin-scala_2.12.tgz.sha512";
+    source_release:
+      name: "Apache Flink 1.11.6"
+      id: "1116-download-source"
+      url: 
"https://www.apache.org/dyn/closer.lua/flink/flink-1.11.6/flink-1.11.6-src.tgz";
+      asc_url: 
"https://downloads.apache.org/flink/flink-1.11.6/flink-1.11.6-src.tgz.asc";
+      sha512_url: 
"https://downloads.apache.org/flink/flink-1.11.6/flink-1.11.6-src.tgz.sha512";
+    release_notes_url: 
"https://nightlies.apache.org/flink/flink-docs-release-1.11/release-notes/flink-1.11.html";
 
 flink_statefun_releases:
   -
@@ -176,10 +197,18 @@ release_archive:
     flink:
       -
         version_short: "1.14"
+        version_long: 1.14.2
+        release_date: 2021-12-16
+      -
+        version_short: "1.14"
         version_long: 1.14.0
         release_date: 2021-09-29
       -
         version_short: "1.13"
+        version_long: 1.13.5
+        release_date: 2021-12-16
+      -
+        version_short: "1.13"
         version_long: 1.13.3
         release_date: 2021-10-19
       -
@@ -196,6 +225,10 @@ release_archive:
         release_date: 2021-04-30
       -
         version_short: "1.12"
+        version_long: 1.12.7
+        release_date: 2021-12-16
+      -
+        version_short: "1.12"
         version_long: 1.12.5
         release_date: 2021-08-06
       -
@@ -220,6 +253,10 @@ release_archive:
         release_date: 2020-12-08
       -
         version_short: "1.11"
+        version_long: 1.11.6
+        release_date: 2021-12-16
+      -
+        version_short: "1.11"
         version_long: 1.11.4
         release_date: 2021-08-09
       -
diff --git a/_posts/2021-12-10-log4j-cve.md b/_posts/2021-12-10-log4j-cve.md
index 163036d..7f02616 100644
--- a/_posts/2021-12-10-log4j-cve.md
+++ b/_posts/2021-12-10-log4j-cve.md
@@ -8,6 +8,11 @@ authors:
 excerpt: "Apache Flink is affected by an Apache Log4j Zero Day 
(CVE-2021-44228). This blog post contains advise for users on how to address 
this."
 ---
 
+<div class="alert alert-info" markdown="1">
+Please see [this](/2021/12/16/log4j-patch-releases) for our updated 
recommendation regarding this CVE.
+</div>
+
+
 Yesterday, a new Zero Day for Apache Log4j was 
[reported](https://www.cyberkendra.com/2021/12/apache-log4j-vulnerability-details-and.html).
 
 It is by now tracked under 
[CVE-2021-44228](https://nvd.nist.gov/vuln/detail/CVE-2021-44228). 
 
diff --git a/_posts/2021-12-16-log4j-patch-releases.md 
b/_posts/2021-12-16-log4j-patch-releases.md
new file mode 100644
index 0000000..fb84c27
--- /dev/null
+++ b/_posts/2021-12-16-log4j-patch-releases.md
@@ -0,0 +1,42 @@
+---
+layout: post
+title:  "Apache Flink Log4j emergency releases"
+date:   2021-12-16 00:00:00
+categories: news
+authors:
+- chesnay:
+  name: "Chesnay Schepler"
+
+---
+
+The Apache Flink community has released emergency bugfix versions of Apache 
Flink for the 1.11, 1.12, 1.13 and 1.14 series.
+
+These releases include a version upgrade for Log4j to address 
[CVE-2021-44228](https://nvd.nist.gov/vuln/detail/CVE-2021-44228) and 
[CVE-2021-45046](https://nvd.nist.gov/vuln/detail/CVE-2021-45046).
+
+We highly recommend all users to upgrade to the respective patch release.
+
+You can find the source and binaries on the updated [Downloads page]({{ 
site.baseurl }}/downloads.html), and Docker images in the 
[apache/flink](https://hub.docker.com/r/apache/flink) dockerhub repository.
+
+<div class="alert alert-info" markdown="1">
+We are publishing this announcement earlier than usual to give users access to 
the updated source/binary releases as soon as possible.
+
+As a result of that certain artifacts are not yet available:
+
+* Maven artifacts are currently being synced to Maven central and will become 
available over the next 24 hours.
+* Docker images at 
[https://hub.docker.com/_/flink](https://hub.docker.com/_/flink) will be 
published at a later date.
+* The 1.11.6/1.12.7 Python binaries will be published at a later date.
+
+This post will be continously updated to reflect the latest state.
+</div>
+
+<div class="alert alert-info" markdown="1">
+The newly released versions are:
+
+* 1.14.2
+* 1.13.5
+* 1.12.7
+* 1.11.6
+
+To clarify and avoid confusion: The 1.14.1 / 1.13.4 / 1.12.6 / 1.11.5 releases 
were _skipped_ because 
[CVE-2021-45046](https://nvd.nist.gov/vuln/detail/CVE-2021-45046) was 
discovered during the release publication. Some artifacts were published to 
Maven Central, but no source/binary releases not Docker images are available 
for those versions.
+</div>
+
diff --git a/q/gradle-quickstart.sh b/q/gradle-quickstart.sh
index d3eba9a..baa6315 100755
--- a/q/gradle-quickstart.sh
+++ b/q/gradle-quickstart.sh
@@ -41,7 +41,7 @@ function mkPackage() {
 defaultProjectName="quickstart"
 defaultOrganization="org.myorg.quickstart"
 defaultVersion="0.1-SNAPSHOT"
-defaultFlinkVersion="${1:-1.14.0}"
+defaultFlinkVersion="${1:-1.14.2}"
 defaultScalaBinaryVersion="${2:-2.11}"
 
 echo "This script creates a Flink project using Java and Gradle."
diff --git a/q/quickstart-scala.sh b/q/quickstart-scala.sh
index 11a5dcd..e66bd81 100755
--- a/q/quickstart-scala.sh
+++ b/q/quickstart-scala.sh
@@ -24,7 +24,7 @@ PACKAGE=quickstart
 mvn archetype:generate                                                         
\
   -DarchetypeGroupId=org.apache.flink                          \
   -DarchetypeArtifactId=flink-quickstart-scala         \
-  -DarchetypeVersion=${1:-1.14.0}                                              
        \
+  -DarchetypeVersion=${1:-1.14.2}                                              
        \
   -DgroupId=org.myorg.quickstart                                       \
   -DartifactId=$PACKAGE                                                        
        \
   -Dversion=0.1                                                                
                \
diff --git a/q/quickstart.sh b/q/quickstart.sh
index 0bf3c47..7121e2f 100755
--- a/q/quickstart.sh
+++ b/q/quickstart.sh
@@ -24,7 +24,7 @@ PACKAGE=quickstart
 mvn archetype:generate                                                         
\
   -DarchetypeGroupId=org.apache.flink                          \
   -DarchetypeArtifactId=flink-quickstart-java          \
-  -DarchetypeVersion=${1:-1.14.0}                                              
        \
+  -DarchetypeVersion=${1:-1.14.2}                                              
        \
   -DgroupId=org.myorg.quickstart                                       \
   -DartifactId=$PACKAGE                                                        
        \
   -Dversion=0.1                                                                
                \
diff --git a/q/sbt-quickstart.sh b/q/sbt-quickstart.sh
index 78a4c24..12751a5 100755
--- a/q/sbt-quickstart.sh
+++ b/q/sbt-quickstart.sh
@@ -42,7 +42,7 @@ defaultProjectName="Flink Project"
 defaultOrganization="org.example"
 defaultVersion="0.1-SNAPSHOT"
 defaultScalaVersion="2.12.7"
-defaultFlinkVersion="1.14.0"
+defaultFlinkVersion="1.14.2"
 
 echo "This script creates a Flink project using Scala and SBT."
 

Reply via email to