[CASSANDRA-17965] cassandra-driver-core vulnerability CVE-2019-2684

• Type: Bug
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 3.0.28, 3.11.14, 4.0.7, 4.1-rc1, 5.0-alpha1, 5.0
• Component/s: Dependencies
• Bug Category: Security
• Severity: Normal
• Complexity: Normal
• Discovered By: User Report
• Platform: All
• Since Version: NA

Source Control Link

https://github.com/apache/cassandra/commit/3d4e6944ef11d96858507779b9280f5b9c198ffa

Test and Documentation Plan

run CI

• Assignee: Brandon Williams
• Reporter: Brandon Williams

Authors

Brandon Williams

Reviewers

Stefan Miklosovic

• Created: 17/Oct/22 14:50
• Updated: 12/Sep/23 13:02
• Resolved: 18/Oct/22 16:21

Description

As the summary says, CVE-2019-2684 affects cassandra-driver-core including both versions we use, 3.0.1 and 3.11.0.