[HADOOP-16871] Upgrade Netty version to 4.1.45.Final to handle CVE-2019-20444,CVE-2019-16869

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.3.0
• Fix Version/s: 3.3.0, 3.1.4, 3.2.2
• Target Version/s: 3.3.0, 3.1.4, 3.2.2, 2.10.1
• Assignee: Aray Chenchu Sukesh
• Reporter: Aray Chenchu Sukesh
• Created: 19/Feb/20 05:03
• Updated: 10/Mar/20 14:10
• Resolved: 10/Mar/20 01:22

Description

[CVE-2019-20444 |https://rnd-vulncenter.huawei.com/vuln/toViewOfficialDetail?cveId=CVE-2019-20444]

[CVE-2019-16869|https://rnd-vulncenter.huawei.com/vuln/toViewOfficialDetail?cveId=CVE-2019-16869]

We should upgrade the netty dependency to 4.1.45.Final version

Issue Links

• is duplicated by: HADOOP-16907 Update Netty to 4.1.46Final