[
https://issues.apache.org/jira/browse/FLUME-3199?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16272528#comment-16272528
]
ASF GitHub Bot commented on FLUME-3199:
---------------------------------------
GitHub user mcsanady opened a pull request:
https://github.com/apache/flume/pull/186
FLUME-3199 Update netty to latest 3.x version
With this change I would upgrade netty to latest 3.x version.
The netty-all 4.x upgrade requires the rewriting of NettyAvroRpcClient
class which could be next step.
The current version (3.9.4) has known vulnerability:
[CVE-2015-2156](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2156)
Unit tests passed.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/mcsanady/flume FLUME-3199
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/flume/pull/186.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #186
----
commit 9eda3ed4f92a1a05cacc355744064655122ce4c1
Author: Miklos Csanady <[email protected]>
Date: 2017-11-29T15:52:52Z
FLUME-3199 Update netty to latest
----
> Update netty to latest
> ----------------------
>
> Key: FLUME-3199
> URL: https://issues.apache.org/jira/browse/FLUME-3199
> Project: Flume
> Issue Type: Dependency upgrade
> Reporter: Miklos Csanady
> Assignee: Miklos Csanady
>
> The current latest version is 3.10.6.Final. Flume should depend on this.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
