Ververica Platform 2.6.4

Release Date: 2022-09-06

Changelog

Apache Flink®

This release adds support for the patch releases 1.14.5 and 1.13.6 of Apache Flink®.

• For Stream Edition the following Apache Flink® Docker images are available. Please check Ververica Platform Docker Images for all available Apache Flink® images and additional tags.

  • 1.12.7-stream2-scala_2.11-java8
  • 1.12.7-stream2-scala_2.11-java11
  • 1.12.7-stream2-scala_2.12-java8
  • 1.12.7-stream2-scala_2.12-java11
  • 1.13.6-stream1-scala_2.11-java8
  • 1.13.6-stream1-scala_2.11-java11
  • 1.13.6-stream1-scala_2.12-java8
  • 1.13.6-stream1-scala_2.12-java11
  • 1.14.5-stream1-scala_2.11-java8
  • 1.14.5-stream1-scala_2.11-java11
  • 1.14.5-stream1-scala_2.12-java8
  • 1.14.5-stream1-scala_2.12-java11

• For Spring Edition the following / archives are available

  • flink-1.12.7-spring2-scala_2.11.tgz
  • flink-1.12.7-spring2-scala_2.12.tgz
  • flink-1.13.6-spring1-scala_2.11.tgz
  • flink-1.13.6-spring1-scala_2.12.tgz
  • flink-1.14.5-spring1-scala_2.11.tgz
  • flink-1.14.5-spring1-scala_2.12.tgz

Vulnerability Fixes (outside of Apache Flink®)

• Updated Tomcat to resolve vulnerability CVE-2022-29885
• Updated Google OAuth client to resolve vulnerability CVE-2021-22573
• Updated Spring Boot to resolve vulnerabilities CVE-2022-22978 and CVE-2022-22976
• Updated Hadoop to resolve vulnerability CVE-2021-37404
• Updated Apache Xalan to resolve CVE-2022-34169
• Updated Jetty: Java based HTTP/1.x, HTTP/2, Servlet, WebSocket Server to resolve vulnerability CVE-2022-2048
• Updated PostgreSQL JDBC Driver (pgjdbc) to resolve vulnerability CVE-2022-31197
• Updated H2 Database Engine to resolve vulnerabilities CVE-2022-23221, CVE-2021-42392, CVE-2021-23463
• Updated jackson-databind to resolve vulnerability CVE-2020-36518

Event cleanup

In case you configure a maximum number of events to keep, the limit will now be applied per deployment instead of per namespace. See event service configuration for more information.

• It is now possible to configure custom pod annotations in the values.yaml file. See Custom Pod Annotations.

Upgrade

We recommend upgrading via Helm using the following commands:

helm repo add ververica https://charts.ververica.com
helm repo update
helm upgrade [RELEASE] ververica/ververica-platform --version 5.2.4 --values custom-values.yaml