You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@lucene.apache.org by "Andras Salamon (Jira)" <ji...@apache.org> on 2020/03/02 11:31:00 UTC

[jira] [Created] (SOLR-14296) Update netty to 4.1.46

Andras Salamon created SOLR-14296:
-------------------------------------

             Summary: Update netty to 4.1.46
                 Key: SOLR-14296
                 URL: https://issues.apache.org/jira/browse/SOLR-14296
             Project: Solr
          Issue Type: Bug
      Security Level: Public (Default Security Level. Issues are Public)
            Reporter: Andras Salamon
         Attachments: SOLR-14296-01.patch

There are two CVEs against the current netty version:

[https://nvd.nist.gov/vuln/detail/CVE-2019-20444]
 [https://nvd.nist.gov/vuln/detail/CVE-2019-20445]

Although solr is not affected it would be still good to update netty.

The first non-affected netty version is 4.1.45 but during the update I've found a netty bug ( [https://github.com/netty/netty/issues/10017] ) so it's better to update to 4.1.46



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@lucene.apache.org
For additional commands, e-mail: issues-help@lucene.apache.org