[SOLR-14296] Update netty to 4.1.47

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 8.6
• Assignee: Unassigned
• Reporter: Andras Salamon
• Created: 02/Mar/20 11:30
• Updated: 15/Jul/20 15:09
• Resolved: 16/Mar/20 02:16

Description

There are two CVEs against the current netty version:

https://nvd.nist.gov/vuln/detail/CVE-2019-20444
https://nvd.nist.gov/vuln/detail/CVE-2019-20445

Although solr is not affected it would be still good to update netty.

The first non-affected netty version is 4.1.45 but during the update I've found a netty bug ( https://github.com/netty/netty/issues/10017 ) so it's better to update to 4.1.46

Issue Links

• is part of: SOLR-14312 Upgrade Zookeeper to 3.5.7