[FLUME-3386] flume-ng-sdk uses vulnerable version of netty

• Type: Dependency upgrade
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.9.0
• Fix Version/s: 1.10.0
• Assignee: Unassigned
• Reporter: Lily Warner
• Created: 05/Mar/21 00:36
• Updated: 04/Apr/22 08:25
• Resolved: 08/Feb/22 07:59

Description

Vulnerabilities:

• https://nvd.nist.gov/vuln/detail/CVE-2019-16869
• https://nvd.nist.gov/vuln/detail/CVE-2019-20444
• https://nvd.nist.gov/vuln/detail/CVE-2019-20445
• sonatype-2020-0103
• sonatype-2020-0029

Version to migrate to: 4.1.59 or above

Issue Links

• duplicates: FLUME-3363 CVE-2019-20445