Hi everyone,

I would like to start discussion about creating a new 18 release for
flink-shaded[1].

Among others it brings fix for ZooKeeper CVE [2],
a couple of Guava CVEs [3], [4]
and support of jdk 21 from netty mentioned in one of
the java 21[5] support subtasks [6]

Also making a release now will allow to have enough time
for testing before Flink 1.19 release.

I would volunteer to make the release happen
however probably I guess I will need some PMC help


[1] https://github.com/apache/flink-shaded
[2] https://nvd.nist.gov/vuln/detail/CVE-2023-44981
[3] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2976
[4] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8908
[5] https://issues.apache.org/jira/browse/FLINK-33163
[6] https://issues.apache.org/jira/browse/FLINK-33331






-- 
Best regards,
Sergey

Reply via email to