root
/
kafka
mirror of https://github.com/apache/kafka.git
1
0
Fork 0
Code Issues Actions 2 Packages Projects Releases Wiki Activity

KAFKA-12820: Upgrade maven-artifact dependency to resolve CVE-2021-26291 

CVE-2021-26291, which makes Man-In-The-Middle-Attack possible, was fixed in maven 3.8.1.

Reviewers: Luke Chen <showuon@gmail.com>, Manikumar Reddy <manikumar.reddy@gmail.com>
This commit is contained in:
Lee Dongjin 2021-05-21 16:07:07 +09:00 committed by GitHub
parent c714e67685
commit 57c1422468
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
gradle/dependencies.gradle
View File

@ -97,7 +97,7 @@ versions += [
kafka_26: "2.6.2", kafka_26: "2.6.2",
kafka_27: "2.7.1", kafka_27: "2.7.1",
lz4: "1.7.1", lz4: "1.7.1",
mavenArtifact: "3.6.3", mavenArtifact: "3.8.1",
metrics: "2.2.0", metrics: "2.2.0",
mockito: "3.9.0", mockito: "3.9.0",
netty: "4.1.62.Final", netty: "4.1.62.Final",