GitHub user mcsanady opened a pull request: https://github.com/apache/flume/pull/186
FLUME-3199 Update netty to latest 3.x version With this change I would upgrade netty to latest 3.x version. The netty-all 4.x upgrade requires the rewriting of NettyAvroRpcClient class which could be next step. The current version (3.9.4) has known vulnerability: [CVE-2015-2156](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2156) Unit tests passed. You can merge this pull request into a Git repository by running: $ git pull https://github.com/mcsanady/flume FLUME-3199 Alternatively you can review and apply these changes as the patch at: https://github.com/apache/flume/pull/186.patch To close this pull request, make a commit to your master/trunk branch with (at least) the following in the commit message: This closes #186 ---- commit 9eda3ed4f92a1a05cacc355744064655122ce4c1 Author: Miklos Csanady <miklos.csan...@cloudera.com> Date: 2017-11-29T15:52:52Z FLUME-3199 Update netty to latest ---- ---