[CASSANDRA-15873] Update Netty 4.0.44 -> 4.1.50 (fix security/performance issues)

• Type: Task
• Status: Resolved
• Priority: Normal
• Resolution: Fixed
• Fix Version/s: 3.11.x
• Component/s: Dependencies
• Complexity: Low Hanging Fruit
• Platform: All

Test and Documentation Plan

TBD

• Assignee: Unassigned
• Reporter: Matt Davis
• Created: 12/Jun/20 18:15
• Updated: 03/Jun/24 22:22
• Resolved: 03/Jun/24 22:22

Description

See https://issues.apache.org/jira/browse/CASSANDRA-15868 for the same issue on 4.0 / trunk. Attached is an OWASP dependency report for Netty 4.0.44, which identifies 3 of the same vulnerabilities as above.

 

Additionally, 4.1.50 contains aarch64 native libraries which can improve performance on ARM processors. 

 

Issue Links

• duplicates: CASSANDRA-17992 Upgrade Netty on 5.0
• is related to: CASSANDRA-15868 Update Netty version to 4.1.50 because there are security issues in 4.1.37