CVE-2024-39863

Advisory

Spark-on-k8s updates `apache-airflow` to address security vulnerability CVE-2024-39863.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* security: bump zipp to avoid CVE-2024-5569 by hussein-awala in https://github.com/hussein-awala/spark-on-k8s/pull/81
* security: bump apache-airflow to avoid CVE-2024-39863 and CVE-2024-39877 by hussein-awala in https://github.com/hussein-awala/spark-on-k8s/pull/82
* security: update setuptools to avoid CVE-2024-6345 by hussein-awala in https://github.com/hussein-awala/spark-on-k8s/pull/83
* fix: propagate service account + test by rivamarco in https://github.com/hussein-awala/spark-on-k8s/pull/88
* feat(python-client, airflow): support startup_timeout for pending state waiting by hussein-awala in https://github.com/hussein-awala/spark-on-k8s/pull/84

New Contributors
* rivamarco made their first contribution in https://github.com/hussein-awala/spark-on-k8s/pull/88

**Full Changelog**: https://github.com/hussein-awala/spark-on-k8s/compare/0.9.1...0.10.0

Resources

• https://github.com/hussein-awala/spark-on-k8s/pull/82
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-39863