[ 
https://issues.apache.org/jira/browse/KAFKA-10414?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Daniel Urban reassigned KAFKA-10414:
------------------------------------

    Assignee: Daniel Urban

> Upgrade api-util dependency - CVE-2018-1337
> -------------------------------------------
>
>                 Key: KAFKA-10414
>                 URL: https://issues.apache.org/jira/browse/KAFKA-10414
>             Project: Kafka
>          Issue Type: Bug
>            Reporter: Daniel Urban
>            Assignee: Daniel Urban
>            Priority: Major
>
> There is a dependency on org.apache.directory.api:api-util:1.0.0, which is 
> involved in CVE-2018-1337. The issue is fixed in api-util:1.0.2<=
> This is a transitive dependency through the apacheds libs. Can be fixed by 
> upgrading to at least version 2.0.0.AM25



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to