[FLUME-3426] Unresolved Security Issues

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Fix Version/s: 1.10.0
• Component/s: Client SDK
• Release Note: Fix applied and waiting for the release.
• Assignee: Unassigned
• Reporter: Yuval Einstiein
• Created: 16/May/22 07:51
• Updated: 31/May/22 20:53
• Resolved: 31/May/22 20:53

Description

Hello Flume Colleagues,

There are few old reported issues from flume-ng-sdk dependencies which are not resolved yet:

commons-compress 1.4.1 - CVE-2021-35517, CVE-2021-36090
jackson-mapper-asl 1.9.13 - CVE-2019-10172, CVE-2019-10202
netty-3.10.6 - CVE-2019-20444

Can you please advise when a new release / patch will be released to resolve these issues?

Regards