[OAK-10076] Bump netty dependency from 4.1.68.Final to 4.1.86.Final

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.46.0, 1.22.14
• Fix Version/s: 1.48.0, 1.22.15
• Component/s: segment-tar
• Labels: cold-standby vulnerability
• Assignee: Andrei Dulceanu
• Reporter: Andrei Dulceanu
• Created: 20/Jan/23 12:01
• Updated: 01/Feb/23 12:38
• Resolved: 23/Jan/23 12:26

Description

Vulnerabilities

CVE-2022-41881

A StackOverflowError can be raised when parsing a malformed crafted message due to an
infinite recursion.

https://github.com/netty/netty/security/advisories/GHSA-fx2c-96vj-985v

Issue Links

• links to: GitHub Pull Request #827
• links to: GitHub Pull Request #830