Thomas Warner created FLUME-3386:
------------------------------------
Summary: flume-ng-sdk uses vulnerable version of netty
Key: FLUME-3386
URL: https://issues.apache.org/jira/browse/FLUME-3386
Project: Flume
Issue Type: Dependency upgrade
Affects Versions: 1.9.0
Reporter: Thomas Warner
Vulnerabilities:
* [https://nvd.nist.gov/vuln/detail/CVE-2019-16869]
* [https://nvd.nist.gov/vuln/detail/CVE-2019-20444]
* [https://nvd.nist.gov/vuln/detail/CVE-2019-20445]
* sonatype-2020-0103
* sonatype-2020-0029
Version to migrate to: 4.1.44 or above
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
