[HADOOP-18079] Upgrade Netty to 4.1.77.Final

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.3.3
• Fix Version/s: 3.4.0, 3.3.4, 3.2.5
• Component/s: build
• Labels: pull-request-available
• Release Note: Netty has been updated to address CVE-2019-20444, CVE-2019-20445 and CVE-2022-24823
• Assignee: Wei-Chiu Chuang
• Reporter: Renukaprasad C
• Created: 12/Jan/22 07:37
• Updated: 12/Jun/23 21:50
• Resolved: 27/Jul/22 18:25

Description

Netty version - 4.1.71 has fix some CVEs.

CVE-2019-20444,
CVE-2019-20445
CVE-2022-24823

Upgrade to latest version.

Issue Links

• is duplicated by: HDFS-16651 io.netty:netty CVE-2019-20444, CVE-2019-20445
• relates to: HADOOP-18569 NFS Gateway may release buffer too early
• supercedes: HDFS-16384 Upgrade Netty to 4.1.72.Final
• links to: GitHub Pull Request #3977
• links to: GitHub Pull Request #4592
• links to: GitHub Pull Request #4593