[
https://issues.apache.org/jira/browse/AVRO-2314?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16761582#comment-16761582
]
ASF subversion and git services commented on AVRO-2314:
-------------------------------------------------------
Commit 6b5963d64e8c339c5266b6b14c707ea9cb10f8fa in avro's branch
refs/heads/master from Fokko Driesprong
[ https://gitbox.apache.org/repos/asf?p=avro.git;h=6b5963d ]
[AVRO-2314] Bump protobuf to 3.6.1
There is an outstanding CVE on 3.4.0+
https://ossindex.sonatype.org/vuln/d47d20ab-eb2a-4cfd-8064-bbf6283649cb
> Bump protobuf to 3.6.1
> ----------------------
>
> Key: AVRO-2314
> URL: https://issues.apache.org/jira/browse/AVRO-2314
> Project: Apache Avro
> Issue Type: Improvement
> Affects Versions: 1.8.2
> Reporter: Fokko Driesprong
> Assignee: Fokko Driesprong
> Priority: Major
> Fix For: 1.9.0
>
>
> There is an outstanding CVE:
> https://ossindex.sonatype.org/vuln/d47d20ab-eb2a-4cfd-8064-bbf6283649cb
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
