[TINKERPOP-2983] Upgrade Netty for Security Reasons - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Bug
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: 3.7.0
Fix Version/s: 3.5.8, 3.6.6, 3.7.1
Component/s: driver, server
Labels:
- security

Flags:

Important
External issue URL:
https://nvd.nist.gov/vuln/detail/CVE-2023-34462

Description

Gremlin 3.7.0 (and previous) depends on Netty 4.1.86 that has a severe security issue reported on https://nvd.nist.gov/vuln/detail/CVE-2023-34462.

The latest Netty version right now if 4.1.96.Final.

Attachments

Activity

People

Assignee:: Cole Greer

Reporter:: Luca Garulli

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 15/Aug/23 18:05

Updated:: 15/Aug/23 21:53

Resolved:: 15/Aug/23 21:53