[FLINK-19782] Upgrade antlr to 4.7.1 or newer

• Type: Improvement
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.11.2, 1.12.0
• Fix Version/s: 1.12.0
• Component/s: API / Python
• Labels: pull-request-available
• Assignee: Robert Metzger
• Reporter: Till Rohrmann
• Created: 23/Oct/20 08:41
• Updated: 27/Apr/21 18:05
• Resolved: 26/Oct/20 18:26

Description

A user reported dependency vulnerabilities which affect antlr [1]. We should upgrade this dependency to 4.7.1 or newer.

[1] https://lists.apache.org/thread.html/r0dd7ff197b2e3bdd80a0326587ca3d0c22e10d1dba17c769d6da7d7a%40%3Cuser.flink.apache.org%3E

Issue Links

• links to: GitHub Pull Request #13780