Details
-
Dependency upgrade
-
Status: Resolved
-
Major
-
Resolution: Duplicate
-
None
-
None
-
None
-
None
Description
The current latest version is 3.10.6.Final. Flume should depend on this.
With this change I would upgrade netty to latest 3.x version.
The netty-all 4.x upgrade requires the rewriting of NettyAvroRpcClient class which could be next step.
The current version (3.9.4) has known vulnerability:
CVE-2015-2156
Attachments
Issue Links
- duplicates
-
FLUME-3115 Upgrade netty library dependency
- Resolved
- links to