You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@flink.apache.org by "Michael Groys (Jira)" <ji...@apache.org> on 2022/07/04 07:16:00 UTC

[jira] [Created] (FLINK-28371) Upgrade netty version in flink-akka-rpc

Michael Groys created FLINK-28371:
-------------------------------------

             Summary: Upgrade netty version in flink-akka-rpc
                 Key: FLINK-28371
                 URL: https://issues.apache.org/jira/browse/FLINK-28371
             Project: Flink
          Issue Type: Technical Debt
          Components: Runtime / RPC
    Affects Versions: 1.14.5, 1.15.0, 1.16.0
            Reporter: Michael Groys


flink-akka-rpc contains dependency on io.netty:netty:3.10.6.Final

which is very old version with multiple known critical vulnerabilities.

Please upgrade this version to at least 4.1.70 as in shaded netty dependency.

Thanks,

Michael



--
This message was sent by Atlassian Jira
(v8.20.10#820010)