Siddharth Anand created AIRFLOW-2767:
----------------------------------------

             Summary: Upgrade gunicorn to 19.5.0 or greater to avoid 
moderate-severity CVE
                 Key: AIRFLOW-2767
                 URL: https://issues.apache.org/jira/browse/AIRFLOW-2767
             Project: Apache Airflow
          Issue Type: Improvement
            Reporter: Siddharth Anand
            Assignee: Siddharth Anand


Refer to the moderate-severity CVE in gunicorn 19.4.5 (apparently fixed in 
19.5.0)

[https://nvd.nist.gov/vuln/detail/CVE-2018-1000164] 

Currently, apache airflow's setup.py allows 19.4.0

-s



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to