logstash-codec-avro icon indicating copy to clipboard operation
logstash-codec-avro copied to clipboard
verified publisher icon logstash-plugins

Bump avro to 1.11.3 to fix cve

Open skumarp7 opened this issue 1 year ago • 2 comments

skumarp7 avatar May 30 '24 16:05 skumarp7

Hi @roaksoax @andsel ,

I understand that there are few compatibility issues with ruby 2.6 and avro gem. Is it not possible to merge the fix in logstash 8.x alone?

skumarp7 avatar Aug 08 '24 05:08 skumarp7

Hi @skumarp7 please send an email to [email protected] communicating which CVE this PR is trying to fix, in the email please specify to communicate with the Logstash team 🙏

andsel avatar Aug 08 '24 11:08 andsel