[
https://issues.apache.org/jira/browse/FLUME-3115?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16134929#comment-16134929
]
ASF GitHub Bot commented on FLUME-3115:
---------------------------------------
GitHub user szaboferee opened a pull request:
https://github.com/apache/flume/pull/155
FLUME-3115 Update netty library
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/szaboferee/flume FLUME-3115
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/flume/pull/155.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #155
----
commit 39f5e448c917c421a82ac807bc6b34a42b42352e
Author: Ferenc Szabo <fsz...@cloudera.com>
Date: 2017-08-18T13:06:02Z
FLUME-3115 Update netty library
----
> Upgrade netty library dependency
> --------------------------------
>
> Key: FLUME-3115
> URL: https://issues.apache.org/jira/browse/FLUME-3115
> Project: Flume
> Issue Type: Bug
> Affects Versions: 1.7.0
> Reporter: Attila Simon
> Assignee: Ferenc Szabo
> Priority: Critical
> Labels: dependency
> Fix For: 1.8.0
>
>
> ||Group||Artifact||Version used||Upgrade target||
> |io.netty|netty|3.2.2.Final, 3.9.4.Final|4.1.12.Final|
> Note: This artifact was moved to:
> - New Group io.netty
> - New Artifact netty-all
> Security vulnerability: http://www.cvedetails.com/cve/CVE-2014-3488/
> Please do:
> - double check the newest version.
> - consider to remove a dependency if better alternative is available.
> - check whether the lib change would introduce a backward incompatibility (in
> which case please add this label `breaking_change` and fix version should be
> the next major)
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
