[FLUME-3115] Upgrade netty library dependency

• Type: Dependency upgrade
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.7.0
• Fix Version/s: 1.8.1, 1.9.0
• Labels: dependency
• Assignee: Ferenc Szabo
• Reporter: Attila Simon
• Created: 05/Jul/17 16:47
• Updated: 06/Nov/18 11:18
• Resolved: 08/Dec/17 13:27

Description

Group	Artifact	Version used	Upgrade target
io.netty	netty	3.2.2.Final, 3.9.4.Final	4.1.12.Final

Note: This artifact was moved to:

• New Group io.netty
• New Artifact netty-all

Security vulnerability: http://www.cvedetails.com/cve/CVE-2014-3488/

Please do:

• double check the newest version.
• consider to remove a dependency if better alternative is available.
• check whether the lib change would introduce a backward incompatibility (in which case please add this label `breaking_change` and fix version should be the next major)

Issue Links

• is duplicated by: FLUME-3199 Update netty to latest 3.x version
• links to: GitHub Pull Request #155