[ZOOKEEPER-4649] Upgrade netty to 4.1.86 because of CVE-2022-41915

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.6.4, 3.9.0, 3.8.1, 3.7.2
• Labels: pull-request-available
• Assignee: Mate Szalay-Beko
• Reporter: Mate Szalay-Beko
• Created: 13/Dec/22 17:54
• Updated: 30/Jan/23 07:57
• Resolved: 19/Jan/23 11:04

Description

Yesterday a new netty version was released fixing [CVE-2022-41915| https://nvd.nist.gov/vuln/detail/CVE-2022-41915.] We need to upgrade the netty version.

Issue Links

• links to: GitHub Pull Request #1963
• links to: GitHub Pull Request #1964