You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@zookeeper.apache.org by "Aayush Atharva (Jira)" <ji...@apache.org> on 2022/12/13 18:01:00 UTC

[jira] [Commented] (ZOOKEEPER-4649) Upgrade netty to 4.1.86 because of CVE-2022-41915

    [ https://issues.apache.org/jira/browse/ZOOKEEPER-4649?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17646761#comment-17646761 ] 

Aayush Atharva commented on ZOOKEEPER-4649:
-------------------------------------------

ZooKeeper does not use the Netty HTTP module. So we're not vulnerable to it.

> Upgrade netty to 4.1.86 because of CVE-2022-41915
> -------------------------------------------------
>
>                 Key: ZOOKEEPER-4649
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-4649
>             Project: ZooKeeper
>          Issue Type: Task
>            Reporter: Mate Szalay-Beko
>            Assignee: Mate Szalay-Beko
>            Priority: Major
>
> Yesterday a new netty version was released fixing [CVE-2022-41915| [https://nvd.nist.gov/vuln/detail/CVE-2022-41915].] We need to upgrade the netty version.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)