Ververica Platform 2.6.0

Release Date: 2021-11-02

Changelog

Apache Flink®

Ververica Platform 2.6.0 supports Apache Flink® 1.14 and Apache Flink® 1.13 under SLA. Apache Flink® 1.12 images are no longer provided in this version but are still supported on a best-effort basis. Apache Flink® 1.11 support has now been dropped.

Apache Flink® 1.14.0

• With the addition of our distribution of Apache Flink® 1.14.0, Ververica Platform 2.6.0 adds support for Apache Flink® 1.14.

• Please check the release notes of Flink 1.14.0 for a complete list of features, improvements and fixes.

• For Stream Edition the following Apache Flink® Docker images are available. Please check Ververica Platform Docker Images for all available Apache Flink® images and additional tags.

  • 1.14.0-stream1-scala_2.11-java8
  • 1.14.0-stream1-scala_2.11-java11
  • 1.14.0-stream1-scala_2.12-java8
  • 1.14.0-stream1-scala_2.12-java11

• For Spring Edition the following / archives are available

  • flink-1.14.0-spring1-scala_2.12.tgz
  • flink-1.14.0-spring1-scala_2.11.tgz

Vulnerability Fixes

The following security vulnerabilities have been fixed compared to 1.13.3-[stream|spring]1:

CVE-2016-5397, CVE-2018-11798, CVE-2018-1320, CVE-2018-20200, CVE-2019-0205, CVE-2019-0210, CVE-2020-13949, CVE-2020-1926, CVE-2021-37136, CVE-2021-37137

Apache Flink® 1.13.3

Please check out the Apache Flink® 1.13.3 release announcement for details about this Apache Flink® release.

• For Stream Edition the following Apache Flink® Docker images are available. Please check Ververica Platform Docker Images for all available Apache Flink® images and additional tags.

  • 1.13.3-stream1-scala_2.11-java8
  • 1.13.3-stream1-scala_2.11-java11
  • 1.13.3-stream1-scala_2.12-java8
  • 1.13.3-stream1-scala_2.12-java11

• For Spring Edition the following / archives are available

  • flink-1.13.3-spring1-scala_2.11.tgz
  • flink-1.13.3-spring1-scala_2.12.tgz

Please check Ververica Platform Docker Images for all available Apache Flink® images and additional tags.

Vulnerability Fixes

The following security vulnerabilities have been fixed compared to 1.13.2-[stream|spring]1:

CVE-2021-35516, CVE-2021-35517, CVE-2021-36090

Flink SQL

The Flink SQL Version has been bumped to Apache Flink® 1.14.0.

Vulnerability Fixes (outside of Apache Flink®)

The following security vulnerability in non-Flink components of Ververica Platform have been fixed compared to 2.5.1:

CVE-2020-28500, CVE-2020-8570, CVE-2021-22119, CVE-2021-25738, CVE-2021-33037, CVE-2021-34428, CVE-2021-34429, CVE-2021-35515, CVE-2021-35516, CVE-2021-35517, CVE-2021-36090

Upgrade

We recommend upgrading via Helm using the following commands:

    helm repo add ververica https://charts.ververica.com
    helm repo update
    helm upgrade [RELEASE] ververica/ververica-platform --version 5.2.0 --values custom-values.yaml