[
https://issues.apache.org/jira/browse/FLINK-19782?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17221522#comment-17221522
]
Robert Metzger commented on FLINK-19782:
----------------------------------------
I decided against backporting the fix to 1.11.3 because it is not a
vulnerability in Flink, just a leftover file from our shading.
> Upgrade antlr to 4.7.1 or newer
> -------------------------------
>
> Key: FLINK-19782
> URL: https://issues.apache.org/jira/browse/FLINK-19782
> Project: Flink
> Issue Type: Task
> Components: API / Python
> Affects Versions: 1.12.0, 1.11.2
> Reporter: Till Rohrmann
> Assignee: Robert Metzger
> Priority: Critical
> Labels: pull-request-available
> Fix For: 1.12.0
>
>
> A user reported dependency vulnerabilities which affect {{antlr}} [1]. We
> should upgrade this dependency to {{4.7.1}} or newer.
> [1]
> https://lists.apache.org/thread.html/r0dd7ff197b2e3bdd80a0326587ca3d0c22e10d1dba17c769d6da7d7a%40%3Cuser.flink.apache.org%3E
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
