tree 4ae9a3e3ced2c3ac59605b4244b05166d5837a1f
parent bd260f14dd280f464e5dcea76b3735782312b4ae
author MartijnVisser <martijnvisser@apache.org> 1697054064 +0200
committer GitHub <noreply@github.com> 1697054064 +0200
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsBcBAABCAAQBQJlJv1wCRBK7hj4Ov3rIwAAB10IAFa/8gJd63eiuLdaZgwWcrFo
 lbICfX9N1h8CFm8OgHE0aQIABQ1lYbQLIln/3UKGotcWYVPo6CBQKJZ4oVqrGdgT
 oImiuadYpjfeGpDT2zWiAnfgzQGUUig56nVJQltxmgj1bOedj9U8XocZuO3+VQf0
 WF2bDvJLzjKIP+U+3eyJJzfGNSlcPTwj2AtLCJgEFKQjjuVMweVYac7mcGkPGJ5R
 EKEDNQ1ZVDRnascMSH2ksE8UV2mwvrII60jeOPa5an5/416PK0KHID5hWSmYhT82
 tHKkoV4KukElE0Wj1CguNC8AE+LUCOrnrpitjxVe1F4fcN4aV4DW9FGz6DTpLIY=
 =E2Yy
 -----END PGP SIGNATURE-----
 

[FLINK-33238][Formats/Avro] Upgrade used AVRO version to 1.11.3. This closes #59

* [FLINK-33238][Formats/Avro] Upgrade used AVRO version to 1.11.3 to mitigate scanners flagging Flink or the Flink Kafka connector as vulnerable for CVE-2023-39410

* [FLINK-33238][Formats/Avro] Pin transitive dependency org.apache.commons:commons-compress to 1.22 to address dependency convergence