[
https://issues.apache.org/jira/browse/ZOOKEEPER-4462?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Enrico Olivelli updated ZOOKEEPER-4462:
---------------------------------------
Fix Version/s: 3.8.0
3.7.1
3.6.4
> Upgrade Netty TCNative to 2.0.48
> --------------------------------
>
> Key: ZOOKEEPER-4462
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4462
> Project: ZooKeeper
> Issue Type: Improvement
> Reporter: Enrico Olivelli
> Priority: Major
> Fix For: 3.8.0, 3.7.1, 3.6.4
>
>
> The OWASP checker fails m we should upgrade to the latest version
> [|https://ci-hadoop.apache.org/blue/organizations/jenkins/zookeeper-multi-branch-owasp/detail/master/162/pipeline#step-35-log-562]
> {code:java}
> [2022-01-28T09:07:39.858Z] One or more dependencies were identified with
> known vulnerabilities in Apache ZooKeeper - Server:
> [2022-01-28T09:07:39.859Z] netty-tcnative-classes-2.0.46.Final.jar
> (pkg:maven/io.netty/[email protected],
> cpe:2.3:a:netty:netty:2.0.46:*:*:*:*:*:*:*) : CVE-2014-3488, CVE-2015-2156,
> CVE-2019-16869, CVE-2019-20444, CVE-2019-20445, CVE-2021-21290,
> CVE-2021-21295, CVE-2021-21409, CVE-2021-37136, CVE-2021-37137,
> CVE-2021-43797{code}
>
>
> [|https://ci-hadoop.apache.org/blue/organizations/jenkins/zookeeper-multi-branch-owasp/detail/master/162/pipeline#step-35-log-565][2022-01-28T09:07:39.859Z]
>
>
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
