[FLINK-21546] Upgrade io.netty netty-codec in Flink (four findings)

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Assignee: Unassigned
• Reporter: Adam Roberts
• Created: 01/Mar/21 13:55
• Updated: 08/Mar/21 15:48
• Resolved: 01/Mar/21 13:58

Description

Hi everyone, have been raising plenty of JIRAs after doing a Twistlock container scan for Flink 1.11.3 and Hadoop 3.3.1 snapshot, for Flink itself (so without using Hadoop) I've noticed the following libraries in use (unfortunately I don't get a path where, but somewhere in Flink they must be, or in a dependent jar?).

 

 

{"fixed in 4.1.46","packageName":"io.netty_netty-codec","packageVersion":"4.1.34.Final"}

}

{"fixed in 4.1.44","packageName":"io.netty_netty-codec","packageVersion":"4.1.34.Final"}

}

{"fixed in 4.1.44","packageName":"io.netty_netty-codec","packageVersion":"4.1.34.Final"}

}

{fixed in 4.1.42.Final","packageName":"io.netty_netty-codec","packageVersion":"4.1.34.Final"}

}

 

https://issues.apache.org/jira/browse/HADOOP-17556 may be useful as well

Could we move up to Netty 4.1.46 (or something even newer?) across everything Flink's using? Again, I apologise for not having the paths to figure out what exactly is using it, but perhaps folks working directly with Flink may have a clue? Thanks

 

Issue Links

• duplicates: FLINK-21019 Bump Netty 4 to 4.1.46