[TEZ-4494] Addressing CVE-2022-41881 - Netty vulnerability

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.10.2
• Fix Version/s: 0.10.3
• Labels: netty security vulnerabilities
• Assignee: Sercan Tekin
• Reporter: Sercan Tekin
• Created: 10/Jun/23 20:35
• Updated: 04/Jan/24 15:14
• Resolved: 04/Jan/24 15:14

Description

Current netty version in the project has high score CVE - https://nvd.nist.gov/vuln/detail/CVE-2022-41881

The netty version should be upgraded at least version 4.1.86.Final. The latest version as of now is 4.1.93.Final.

Issue Links

• links to: GitHub Pull Request #287