Damien Diederen created ZOOKEEPER-4755:
------------------------------------------

             Summary: Handle Netty CVE-2023-4586
                 Key: ZOOKEEPER-4755
                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4755
             Project: ZooKeeper
          Issue Type: Task
            Reporter: Damien Diederen
            Assignee: Damien Diederen


The {{dependency-check:check}}... check currently fails with the following:

{noformat}
[ERROR] netty-handler-4.1.94.Final.jar: CVE-2023-4586(6.5)
{noformat}

According to https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4586 , 
CVE-2023-4586 is reserved.  No fix or additional information is available as of 
the creation of this ticket.

We have to:

# Temporarily suppress the check;
# Monitor CVE-2023-4586 and apply the remediation as soon as it becomes 
available.




--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to