[
https://issues.apache.org/jira/browse/FLINK-20014?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17282202#comment-17282202
]
Alan Leong edited comment on FLINK-20014 at 2/10/21, 3:33 AM:
--------------------------------------------------------------
This issue only affects developers who are building Flink and use the
scaladocs. However, the 2 CVEs are being flagged in vulnerability scans due to
the dependency on scala-compiler.
was (Author: aleong):
This issue only affects developers who are building Flink and use the scaladocs.
> Resolve CVE-2020-11022 and CVE-2020-11023 in scala-compiler
> -----------------------------------------------------------
>
> Key: FLINK-20014
> URL: https://issues.apache.org/jira/browse/FLINK-20014
> Project: Flink
> Issue Type: Improvement
> Components: Build System
> Reporter: Alan Leong
> Priority: Major
>
> Update scala version to resolve CVE-2020-11022 and CVE-2020-11023 in
> scala-compiler. This issue was addressed in Scala 2.12.12
> [https://github.com/scala/scala/pull/8963.|https://github.com/scala/bug/issues/11974]
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
