Skip to content

Removed vulnerabilities by replacing libraries with fixed versions.#1

Open
hendychua wants to merge 1 commit intomasterfrom
FixedBranch
Open

Removed vulnerabilities by replacing libraries with fixed versions.#1
hendychua wants to merge 1 commit intomasterfrom
FixedBranch

Conversation

@hendychua
Copy link
Contributor

This PR fixes all the vulnerabilities in the master branch. The libraries replaced are:

  1. jbcrypt 0.3m to 0.4 (This also removed a vulnerable method call in the code. The code still builds and works.)
  2. kafka-clients 0.9.0.1 to 0.10.1.0
  3. lz4 and xxhash 1.2.0 to 1.3.0.
  4. netty 3.7.0.Final to netty 3.9.8.Final
  5. zookeeper 3.4.6 to 3.4.7.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant