[
https://issues.apache.org/jira/browse/AVRO-2806?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17089468#comment-17089468
]
Gabor Szadovszky commented on AVRO-2806:
----------------------------------------
[~zeshuai007], as you've said there are many major changes between 3.x and 4.x.
I don't really remember what were the exact issues but I could not refactor our
code to use the 4.x. Please note, that I have no experience with Netty. My only
motivation are the CVEs reported for 3.x.
Seems that {{netty-codec-http2}} was introduced separately from {{netty}} in
AVRO-2279. I don't know why don't we use the same version or if it matters at
all.
> Upgrade Netty to 4.x
> --------------------
>
> Key: AVRO-2806
> URL: https://issues.apache.org/jira/browse/AVRO-2806
> Project: Apache Avro
> Issue Type: Task
> Components: java
> Affects Versions: 1.9.2
> Reporter: Gabor Szadovszky
> Priority: Major
>
> ipc-netty still uses the 3.x line which is ended almost 4 years ago. We have
> a couple of CVEs which won't be fixed in 3.x so it is important to migrate to
> the 4.x.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
