Skip to content

Conversation

@matrixik
Copy link
Member

Storm 1.1.1 is affected by the security bug CVE-2018-1332 1.
It is recommended to upgrade to 1.1.3 (the latest release at the moment).

Signed-off-by: Dobroslaw Zybort [email protected]

Storm 1.1.1 is affected by the security bug CVE-2018-1332 [1].
It is recommended to upgrade to 1.1.3 (the latest release at the moment).

[1]: http://www.securityfocus.com/bid/104399

Signed-off-by: Dobroslaw Zybort <[email protected]>
@matrixik
Copy link
Member Author

@timothyb89 @mhoppal
Hi, looks like Storm 1.0.3 was removed from mirrors and is available now only in archives ( http://archive.apache.org/dist/storm/ ).

Can I bump it to 1.0.6 or remove this version altogether and stick only with 1.1.x (like devstack)?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants