[
https://issues.apache.org/jira/browse/FLINK-22208?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Chesnay Schepler closed FLINK-22208.
------------------------------------
Resolution: Fixed
master: ff33feb3b57f3c21514c8941862866f844677080
1.13: cf7faabfe49c8d00426ec78685e458060c5dd23e
1.12: 19b36832b5c309bffd00d8ecac626a23993ccbf5
1.11: 2e645cb8782619228f80db05246ee3d043fdf0db
> Bump snappy-java to 1.1.5+
> --------------------------
>
> Key: FLINK-22208
> URL: https://issues.apache.org/jira/browse/FLINK-22208
> Project: Flink
> Issue Type: Improvement
> Components: Build System
> Reporter: Chesnay Schepler
> Assignee: Chesnay Schepler
> Priority: Major
> Labels: pull-request-available
> Fix For: 1.11.4, 1.13.0, 1.12.3
>
>
> https://nvd.nist.gov/vuln/detail/CVE-2018-7577
> The relevant commit in the underlying snappy version is
> https://github.com/google/snappy/commit/3c706d22306efbd0d6ac050cb48179e1dcfbff7a
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
