[ZOOKEEPER-4417] Zookeeper 3.7.0 : Netty related jars to be upgraded to 4.1.68 for Security upgrade

• Type: Bug
• Status: Open
• Priority: Critical
• Resolution: Unresolved
• Affects Version/s: 3.7.0
• Component/s: server
• Assignee: Unassigned
• Reporter: Anil Kumar Ravva
• Created: 18/Nov/21 13:19
• Updated: 22/Nov/21 04:24

Description

Netty related jars have downgraded in latest(3.7.0) to lower version compared the previous versions of zookeeper(3.6.3). 

Please find the details below:

Current Zookeeper Version 3.7.0: netty 4.1.59 version jars have been used

Old Zookeeper version apache-zookeeper-3.6.3 : netty 4.1.63 have been used.

Is there any reason behind this change?

There are so many security advances have been made as part of netty upgrade, All those were missed here. 

 

Is there any plan of adding this jar in the future release.