HIVE-28040:Upgrade netty to 4.1.108 due to CVEs

Open devaspatikrishnatri opened this issue 1 year ago • 2 comments

What changes were proposed in this pull request?

Upgrading Netty to 4.1.108.FINAL and cleaning up transitive stray versions.

Why are the changes needed?

FIx CVEs

Does this PR introduce any user-facing change?

Is the change a dependency upgrade?

Yes, Tree attached in Jira.

How was this patch tested?

Relying on precommits.

Aug 27 '24 10:08 devaspatikrishnatri

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

Sep 05 '24 20:09 sonarqubecloud[bot]

Needs more work.There seems to be some compat issues with later release of netty and arrow https://github.com/apache/arrow/issues/43491

Sep 05 '24 20:09 devaspatikrishnatri

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Feel free to reach out on the [email protected] list if the patch is in need of reviews.

Nov 05 '24 00:11 github-actions[bot]