You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tinkerpop.apache.org by "Stephen Mallette (Jira)" <ji...@apache.org> on 2021/12/15 15:52:00 UTC

[jira] [Commented] (TINKERPOP-2669) Netty 4.1.61 flagged with medium severity security violations

    [ https://issues.apache.org/jira/browse/TINKERPOP-2669?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17460050#comment-17460050 ] 

Stephen Mallette commented on TINKERPOP-2669:
---------------------------------------------

We'd already gone to 4.1.68 for next release 3.4.3/3.5.2 - i'm going to test 4.1.72 and bump to that.

> Netty 4.1.61 flagged with medium severity security violations
> -------------------------------------------------------------
>
>                 Key: TINKERPOP-2669
>                 URL: https://issues.apache.org/jira/browse/TINKERPOP-2669
>             Project: TinkerPop
>          Issue Type: Improvement
>          Components: server
>    Affects Versions: 3.4.12, 3.5.1
>            Reporter: Aaron Coady
>            Priority: Major
>
> In addition to the two vulnerabilities addressed in https://issues.apache.org/jira/browse/TINKERPOP-2632
>  
> Netty 4.1.61 has a medium security vulnerability described here:
> [https://nvd.nist.gov/vuln/detail/CVE-2021-43797]
> The scan report identifies that these issues are addressed in version 4.1.71
>  



--
This message was sent by Atlassian Jira
(v8.20.1#820001)