[
https://issues.apache.org/jira/browse/FLINK-41076?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Purushottam Sinha updated FLINK-41076:
--------------------------------------
Description: Bump the Netty and Jackson bundled by flink-shaded on
release-21.0 to pick up security fixes: Netty 4.2.6.Final -> 4.2.17.Final
(flink-shaded-netty, flink-shaded-zookeeper-3) and Jackson 2.20.1 -> 2.21.5
(flink-shaded-jackson, jsonSchema, swagger; 2.20.x has no fixed release).
Tracked as two PRs: Netty in apache/flink-shaded#174, Jackson in
apache/flink-shaded#175. (was: Bump the Netty bundled by flink-shaded-netty
and flink-shaded-zookeeper-3 on release-21.0 from 4.2.6.Final to 4.2.17.Final
to pick up the Netty security fixes published since 4.2.6.)
Summary: Bump Netty to 4.2.17.Final and Jackson to 2.21.5 in
flink-shaded release-21.0 (was: Bump Netty to 4.2.17.Final in flink-shaded
release-21.0)
> Bump Netty to 4.2.17.Final and Jackson to 2.21.5 in flink-shaded release-21.0
> -----------------------------------------------------------------------------
>
> Key: FLINK-41076
> URL: https://issues.apache.org/jira/browse/FLINK-41076
> Project: Flink
> Issue Type: Improvement
> Components: BuildSystem / Shaded
> Reporter: Purushottam Sinha
> Priority: Major
> Labels: pull-request-available
>
> Bump the Netty and Jackson bundled by flink-shaded on release-21.0 to pick up
> security fixes: Netty 4.2.6.Final -> 4.2.17.Final (flink-shaded-netty,
> flink-shaded-zookeeper-3) and Jackson 2.20.1 -> 2.21.5 (flink-shaded-jackson,
> jsonSchema, swagger; 2.20.x has no fixed release). Tracked as two PRs: Netty
> in apache/flink-shaded#174, Jackson in apache/flink-shaded#175.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
