Details
-
Technical Debt
-
Status: Resolved
-
Major
-
Resolution: Duplicate
-
1.14.5, 1.15.0, 1.16.0
-
None
-
None
Description
Flink currently includes multiple references to both AWS SDK v1 and AWS SDK v2. Both of them are outdated and their transitive dependencies contain vulnerabilities. Those don't immediately affect Flink, but they do cause false positives in scanners.
We should at least upgrade both of them to their latest versions.
Currently used versions and latest available version (at the moment of creating this ticket)
1.12.7 instead of 1.12.178
1.11.951 instead of 1.12.178
2.17.52 instead of 2.17.149
Attachments
Issue Links
- is duplicated by
-
FLINK-28094 Upgrade AWS SDK to support ap-southeast-3
-
- Resolved
-