[FLINK-22441] In Flink v1.11.3 contains netty(version:3.10.6) netty(version:4.1.60) . There are many vulnerabilities, like CVE-2021-21409 etc. please confirm these version and fix. thx

• Type: Bug
• Status: Closed
• Priority: Not a Priority
• Resolution: Won't Fix
• Affects Version/s: 1.11.3, 1.12.2, 1.13.0
• Component/s: Runtime / Coordination
• Labels: auto-deprioritized-major auto-deprioritized-minor
• Assignee: Unassigned
• Reporter: 张健
• Created: 24/Apr/21 12:54
• Updated: 22/Aug/22 16:05
• Resolved: 02/Mar/22 07:33

Description

In Flink v1.11.3 contains netty(version:3.10.6) netty(version:4.1.60) . There are many vulnerabilities, like CVE-2021-21409 CVE-2021-21295 etc. please confirm these version and fix. thx

Issue Links

• is cloned by: FLINK-29065 Flink v1.15.1 contains netty(version:3.10.6). There are many vulnerabilities, like CVE-2021-21409 etc. please confirm these version and fix. thx
• is related to: FLINK-18783 Load AkkaRpcService through separate class loader
• is related to: FLINK-20845 Drop support for Scala 2.11