Skip to content

upgrade avro version to 1.11.0#12156

Closed
aggarwalakshay wants to merge 1 commit intoapache:masterfrom
aggarwalakshay:akshay-upgrade-avro-ver
Closed

upgrade avro version to 1.11.0#12156
aggarwalakshay wants to merge 1 commit intoapache:masterfrom
aggarwalakshay:akshay-upgrade-avro-ver

Conversation

@aggarwalakshay
Copy link
Contributor

@aggarwalakshay aggarwalakshay commented Jan 14, 2022

Description

Upgrading avro version to 1.11.0 because of security vulnerability.



This PR has:

  • been self-reviewed.
  • added documentation for new or modified features or behaviors.
  • added Javadocs for most classes and all non-trivial methods. Linked related entities via Javadoc links.
  • added or updated version, license, or notice information in licenses.yaml
  • added comments explaining the "why" and the intent of the code wherever would not be obvious for an unfamiliar reader.
  • added unit tests or modified existing tests to cover new code paths, ensuring the threshold for code coverage is met.
  • added integration tests.
  • been tested in a test Druid cluster.

@jihoonson
Copy link
Contributor

@aggarwalakshay thank you for the PR. Can you link the CVE in question in the PR?

@aggarwalakshay
Copy link
Contributor Author

@jihoonson it was this but it turns out to be false positive and only effects .net so closing this pr

@aggarwalakshay aggarwalakshay deleted the akshay-upgrade-avro-ver branch January 14, 2022 18:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants