[ZOOKEEPER-4209] Update Netty version to 4.1.53.Final on 3.5 branch

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.5.9
• Fix Version/s: 3.5.10, 3.6.3, 3.7.0, 3.8.0
• Labels: pull-request-available

Environment

It appears this is an issue that affects all versions, as this has only been address on netty 4.1.53.Final, which hasn't been up-taken yet (last upgrade afaict was 4.1.50.Final)

• Assignee: Sean Bridges
• Reporter: Frederiko Costa
• Created: 13/Feb/21 06:36
• Updated: 18/May/22 13:15
• Resolved: 17/Feb/21 17:34

Description

Zookeeper 3.5.9 upgraded netty to 4.1.50.Final. Would like to uptake netty 4.1.53.Final which addressed the vulnerability described at https://snyk.io/vuln/SNYK-JAVA-IONETTY-1020439

 

Issue Links

• is a clone of: ZOOKEEPER-1715 Upgrade netty version
• links to: GitHub Pull Request #1603
• links to: GitHub Pull Request #1604
• links to: GitHub Pull Request #1605