[HBASE-26733] [hbase-thirdparty] Upgrade Netty to 4.1.73.Final

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: thirdparty-3.5.2, thirdparty-4.1.0
• Component/s: security, thirdparty
• Hadoop Flags: Reviewed
• Release Note: Upgrade netty to 4.1.73.Final for addressing CVE-2021-43797.
• Assignee: Andrew Kyle Purtell
• Reporter: Andrew Kyle Purtell
• Created: 04/Feb/22 20:15
• Updated: 07/Nov/22 02:31
• Resolved: 05/Feb/22 08:20

Description

Netty 4.1.71.Final included a fix for HTTP-request-smuggling. We are still on 4.1.70.Final.

Latest is 4.1.73.Final, use that.

Issue Links

• links to: GitHub Pull Request #75
• links to: GitHub Pull Request #76