[ZOOKEEPER-4709] Upgrade Netty to 4.1.94.Final

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Done
• Affects Version/s: 3.7.1, 3.8.1
• Fix Version/s: 3.9.0, 3.7.2, 3.8.2
• Labels: dependency-upgrade pull-request-available
• Assignee: Unassigned
• Reporter: Fabio Buso
• Created: 21/Jun/23 21:49
• Updated: 04/Aug/23 11:28
• Resolved: 02/Jul/23 13:53

Description

Netty 4.1.94 includes several improvements and bug fixes, including a resolution for CVE-2023-34462 related to potential memory allocation vulnerabilities during a TLS handshake with Server Name Indication.

Issue Links

• links to: GitHub Pull Request #2019