Uploaded image for project: 'Apache Avro'
  1. Apache Avro
  2. AVRO-3215

common-compress dependecy has security vulnerabilities

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 1.11.0
    • None
    • None

    Description

      Hi,

      The latest apache avro version 1.10.2 has dependecy on  org.apache.commons:commons-compress:1.20 which has security vulnerabilities. Please upgrade to org.apache.commons:commons-compress:1.21

       

      Attachments

        Issue Links

          duplicates

          Improvement - An improvement or enhancement to an existing feature or task. AVRO-3213 Update commons-compress to version 1.21

          • Major - Major loss of function.
          • Resolved
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. AVRO-3227 Multiple CVEs via Apache Compress

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Activity

            People

              Unassigned Unassigned
              msbaskar Xavier
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: