Nikita Pande created FLUME-3477:
-----------------------------------
Summary: uptick avro-ipc to 1.11.1 from 1.11.0
Key: FLUME-3477
URL: https://issues.apache.org/jira/browse/FLUME-3477
Project: Flume
Issue Type: Improvement
Reporter: Nikita Pande
Fix For: notrack
1.11.0 version has CVE
[CVE-2022-42004|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42004]
[CVE-2022-42003|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42003]
[CVE-2021-46877|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-46877]
[CVE-2020-36518|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36518]
1.11.1 version has CVE
[CVE-2022-42004|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42004]
[CVE-2022-42003|https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42003]
So 2 CVEs are fixed
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@flume.apache.org
For additional commands, e-mail: issues-h...@flume.apache.org
