[ https://issues.apache.org/jira/browse/FLUME-3199?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16272528#comment-16272528 ]
ASF GitHub Bot commented on FLUME-3199: --------------------------------------- GitHub user mcsanady opened a pull request: https://github.com/apache/flume/pull/186 FLUME-3199 Update netty to latest 3.x version With this change I would upgrade netty to latest 3.x version. The netty-all 4.x upgrade requires the rewriting of NettyAvroRpcClient class which could be next step. The current version (3.9.4) has known vulnerability: [CVE-2015-2156](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2156) Unit tests passed. You can merge this pull request into a Git repository by running: $ git pull https://github.com/mcsanady/flume FLUME-3199 Alternatively you can review and apply these changes as the patch at: https://github.com/apache/flume/pull/186.patch To close this pull request, make a commit to your master/trunk branch with (at least) the following in the commit message: This closes #186 ---- commit 9eda3ed4f92a1a05cacc355744064655122ce4c1 Author: Miklos Csanady <miklos.csan...@cloudera.com> Date: 2017-11-29T15:52:52Z FLUME-3199 Update netty to latest ---- > Update netty to latest > ---------------------- > > Key: FLUME-3199 > URL: https://issues.apache.org/jira/browse/FLUME-3199 > Project: Flume > Issue Type: Dependency upgrade > Reporter: Miklos Csanady > Assignee: Miklos Csanady > > The current latest version is 3.10.6.Final. Flume should depend on this. -- This message was sent by Atlassian JIRA (v6.4.14#64029)