[KUDU-3581] Netty CVE Rapid Reset

• Type: Task
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 1.18.0, 1.17.1
• Code Review: https://gerrit.cloudera.org/#/c/21464/
• Assignee: Unassigned
• Reporter: Colm O hEigeartaigh
• Created: 27/May/24 08:54
• Updated: 29/May/24 17:01
• Resolved: 29/May/24 17:01

Description

The version of Netty in Kudu 1.17.0 (4.1.94.Final - https://github.com/apache/kudu/blob/6d6364d19d287d8effb604b6ab11dfdff5db794e/java/gradle/dependencies.gradle#L52) is vulnerable to a security issue:

https://github.com/advisories/GHSA-xpw8-rcwv-8f8p

Please upgrade to at least 4.1.100.Final