Details
-
Improvement
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
-
None
Description
The OWASP checker fails m we should upgrade to the latest version
[2022-01-28T09:07:39.858Z] One or more dependencies were identified with known vulnerabilities in Apache ZooKeeper - Server: [2022-01-28T09:07:39.859Z] netty-tcnative-classes-2.0.46.Final.jar (pkg:maven/io.netty/netty-tcnative-classes@2.0.46.Final, cpe:2.3:a:netty:netty:2.0.46:*:*:*:*:*:*:*) : CVE-2014-3488, CVE-2015-2156, CVE-2019-16869, CVE-2019-20444, CVE-2019-20445, CVE-2021-21290, CVE-2021-21295, CVE-2021-21409, CVE-2021-37136, CVE-2021-37137, CVE-2021-43797
https://ci-hadoop.apache.org/blue/organizations/jenkins/zookeeper-multi-branch-owasp/detail/master/162/pipeline#step-35-log-565[2022-01-28T09:07:39.859Z]
Attachments
Issue Links
- is fixed by
-
ZOOKEEPER-4531 Revert Netty TCNative change
- Closed
- is related to
-
ZOOKEEPER-4469 Suppress OWASP false positives related to Netty TCNative
- Closed
- links to