Ververica Platform 2.5.3

Release Date: 2021-12-17

Changelog

Apache Flink®

This release adds support for the latest patch releases of Apache Flink®, 1.11.6, 1.12.7 and 1.13.5. These releases upgrade the used version of Log4j to 2.16.0 in order to fix the recently discovered critical vulnerabilities.

Please check out the Apache Flink® release announcement for additional details.

• For Stream Edition the following Apache Flink® Docker images are available. Please check Ververica Platform Docker Images for all available Apache Flink® images and additional tags.

  • 1.11.6-stream1-scala_2.11
  • 1.11.6-stream1-scala_2.12
  • 1.12.7-stream1-scala_2.11-java8
  • 1.12.7-stream1-scala_2.11-java11
  • 1.12.7-stream1-scala_2.12-java8
  • 1.12.7-stream1-scala_2.12-java11
  • 1.13.5-stream1-scala_2.11-java8
  • 1.13.5-stream1-scala_2.11-java11
  • 1.13.5-stream1-scala_2.12-java8
  • 1.13.5-stream1-scala_2.12-java11

• For Spring Edition the following / archives are available

  • flink-1.11.6-spring1-scala_2.11.tgz
  • flink-1.11.6-spring1-scala_2.12.tgz
  • flink-1.12.7-spring1-scala_2.11.tgz
  • flink-1.12.7-spring1-scala_2.12.tgz
  • flink-1.13.5-spring1-scala_2.11.tgz
  • flink-1.13.5-spring1-scala_2.12.tgz

Please check Ververica Platform Docker Images for all available Apache Flink® images and additional tags.

Vulnerability Fixes

• The following Log4j-related vulnerabilities have been fixed in the 1.11.6, 1.12.7 and 1.13.5 releases:
  • CVE-2021-44228
  • CVE-2021-45046

Vulnerability Fixes (outside of Apache Flink®)

• Log4j was upgraded to 2.16.0, fixing the related vulnerabilities:
  • CVE-2021-44228
  • CVE-2021-45046
• Logback was upgraded to 1.2.8

Upgrade

We recommend upgrading via Helm using the following commands:

$ helm repo add ververica https://charts.ververica.com
$ helm upgrade [RELEASE] ververica/ververica-platform --version 5.1.3 --values custom-values.yaml