[
https://issues.apache.org/jira/browse/CASSANDRA-15873?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17154719#comment-17154719
]
Matt Davis commented on CASSANDRA-15873:
----------------------------------------
Added the unit test results. I couldn't see any difference between
cassandra-3.11 with or without the updated dependency.
This failed in both cases:
{code}
[junit-timeout] Testcase:
testIndexMemtableSwitching(org.apache.cassandra.index.sasi.SASIIndexTest):
FAILED
[junit-timeout] expected:<0> but was:<1>
[junit-timeout] junit.framework.AssertionFailedError: expected:<0> but was:<1>
[junit-timeout] at
org.apache.cassandra.index.sasi.SASIIndexTest.testIndexMemtableSwitching(SASIIndexTest.java:2379)
{code}
but I understand this test is known to be flaky, per Slack conversations.
> Update Netty 4.0.44 -> 4.1.50 (fix security/performance issues)
> ---------------------------------------------------------------
>
> Key: CASSANDRA-15873
> URL: https://issues.apache.org/jira/browse/CASSANDRA-15873
> Project: Cassandra
> Issue Type: Task
> Components: Dependencies
> Reporter: Matt Davis
> Assignee: Matt Davis
> Priority: Normal
> Fix For: 3.11.x
>
> Attachments: dependency-check-report.html, unittest_netty.log
>
>
> See https://issues.apache.org/jira/browse/CASSANDRA-15868 for the same issue
> on 4.0 / trunk. Attached is an OWASP dependency report for Netty 4.0.44,
> which identifies 3 of the same vulnerabilities as above.
>
> Additionally, 4.1.50 contains aarch64 native libraries which can improve
> performance on ARM processors.
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org
