[jira] [Closed] (FLINK-28371) Upgrade netty version in flink-akka-rpc

["Chesnay Schepler (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/FLINK-28371?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Chesnay Schepler closed FLINK-28371.
------------------------------------
    Resolution: Won't Fix

There is no version of Akka that supports Netty 4.

Closing this in favor of FLINK-28372.

> Upgrade netty version in flink-akka-rpc
> ---------------------------------------
>
>                 Key: FLINK-28371
>                 URL: https://issues.apache.org/jira/browse/FLINK-28371
>             Project: Flink
>          Issue Type: Technical Debt
>          Components: Runtime / RPC
>    Affects Versions: 1.15.0, 1.16.0, 1.14.5
>            Reporter: Michael Groys
>            Priority: Major
>
> flink-akka-rpc contains dependency on io.netty:netty:3.10.6.Final
> which is very old version with multiple known critical vulnerabilities.
> Please upgrade this version to at least 4.1.70 as in shaded netty dependency.
> Thanks,
> Michael



--
This message was sent by Atlassian Jira
(v8.20.10#820010)