Ververica Platform 2.0.3

Release Date: 2020-01-27

Changelog

Bug Fixes

• When Universal Blob Storage is not configured and a Deployment uses Flink Jobmanager Failover with Kubernetes, it fails when recovering from a Savepoint. The fix provided in this release also applies to Deployments already existing when the platform upgrade is performed.
• Ververica Platform's access control layer now allows all authenticated & authorized requests by the Flink web user interface to the Flink Jobmanager. In previous releases, it blocks certain requests (e.g. loading checkpointing statistics for sub-tasks) due to an incorrect path matcher.

Vulnerability Fixes

• https://nvd.nist.gov/vuln/detail/CVE-2018-1000180 (https://nvd.nist.gov/vuln/detail/CVE-2018-1000180)
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000613 (https://nvd.nist.gov/vuln/detail/CVE-2018-1000613)
• https://nvd.nist.gov/vuln/detail/CVE-2019-10744 (https://nvd.nist.gov/vuln/detail/CVE-2019-10744)

Migration

Please download the latest Helm charts for this version from the customer portal and run

1helm upgrade [RELEASE] ververica-platform-2.0.3.tgz --values custom-values.yaml