spuru9 commented on PR #208: URL: https://github.com/apache/flink-connector-jdbc/pull/208#issuecomment-5103037428
11.2.0.jre8 still vulnerable (confirmed via OSV — the jre8 classifier line never got the fix backported at that version number). 13.4.0.jre8 is the first jre8 release actually confirmed clean. Dont see any use of this bump as such. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
