[CASSANDRA-15873] Update Netty 4.0.44 -> 4.1.50 (fix security/performance issues)

• Type: Task
• Status: Open
• Priority: Normal
• Resolution: Unresolved
• Fix Version/s: 3.11.x
• Component/s: Dependencies
• Complexity: Low Hanging Fruit
• Platform: All

Test and Documentation Plan

TBD

• Assignee: Unassigned
• Reporter: Matt Davis
• Created: 12/Jun/20 18:15
• Updated: 06/Aug/20 14:43

Description

See https://issues.apache.org/jira/browse/CASSANDRA-15868 for the same issue on 4.0 / trunk. Attached is an OWASP dependency report for Netty 4.0.44, which identifies 3 of the same vulnerabilities as above.

 

Additionally, 4.1.50 contains aarch64 native libraries which can improve performance on ARM processors. 

 

Issue Links

• is related to: CASSANDRA-15868 Update Netty version to 4.1.50 because there are security issues in 4.1.37