Qihoo360 / XSQL

Unified SQL Analytics Engine Based on SparkSQL
https://qihoo360.github.io/XSQL/
Apache License 2.0
209 stars 62 forks source link

[BUILD] Upgrade netty-all to 4.1.42 and fix vulnerability. #53

Closed beliefer closed 4 years ago

beliefer commented 4 years ago

What changes were proposed in this pull request?

The current code uses io.netty:netty-all:jar:4.1.17 and it will cause a security vulnerabilities. We could get some security info from https://www.tenable.com/cve/CVE-2019-16869.

This reference remind to upgrate the version of netty-all to 4.1.42 or later.

How was this patch tested?

No UT.

wenfang6 commented 4 years ago

LGTM

wenfang6 commented 4 years ago

Thanks! Merged to master and branch-0.6