StreamNative Weekly Release Notes v3.3.1.8

Download

Distributions

• https://github.com/streamnative/pulsar/releases/tag/v3.3.1.8

Packages

• Maven Central

Images

• sn-platform

• sn-platform-slim

• private-cloud

General Changes

Apache Pulsar

[fix] Bump commons-io:commons-io from 2.8.0 to 2.14.0

KoP

Upgrade the apicurio dependency to 2.5.3.Final

Cloud Storage Connector

Fix prootbuf CVE-2024-7254

AWS Lambda Connector

Fix prootbuf CVE-2024-7254

StreamNative Pulsar Plugins

Upgrade Avro from 1.11.3 to 1.11.4 for CVE-2024-47561

7ff1b589 Exclude dnsjava to avoid cve(#1920)

Fix prootbuf CVE-2024-7254

Google BigQuery Sink Connector

Fix prootbuf CVE-2024-7254

Aws EventBridge Connector

Fix prootbuf CVE-2024-7254

Security Fixes

Apache Pulsar

[fix][sec] Upgrade Avro to 1.11.4 to address CVE-2024-47561

[fix][sec][branch-3.3] Upgrade protobuf-java to 3.25.5