[ 
https://issues.apache.org/jira/browse/FLINK-21546?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Adam Roberts updated FLINK-21546:
---------------------------------
    Description: 
Hi everyone, have been raising plenty of JIRAs after doing a Twistlock 
container scan for Flink 1.11.3 and Hadoop 3.3.1 snapshot, for Flink itself (so 
without using Hadoop) I've noticed the following libraries in use 
(unfortunately I don't get a path where, but somewhere in Flink they must be, 
or in a dependent jar?).

 

{{{{}}{{{"fixed in 
4.1.46","packageName":"io.netty_netty-codec","packageVersion":"4.1.34.Final"}}}{{}}}}{{{{}}{{{"fixed
 in 
4.1.44","packageName":"io.netty_netty-codec","packageVersion":"4.1.34.Final"}}}{{}}}}{{{{}}{{{"fixed
 in 
4.1.44","packageName":"io.netty_netty-codec","packageVersion":"4.1.34.Final"}}}{{}}}}{{{{}}{{{fixed
 in 
4.1.42.Final","packageName":"io.netty_netty-codec","packageVersion":"4.1.34.Final"}}}{{}}}}

 

https://issues.apache.org/jira/browse/HADOOP-17556 may be useful as well

Could we move up to Netty 4.1.46 (or something even newer?) across everything 
Flink's using? Again, I apologise for not having the paths to figure out what 
exactly is using it, but perhaps folks working directly with Flink may have a 
clue? Thanks

 

  was:
Hi everyone, have been raising plenty of JIRAs after doing a Twistlock 
container scan for Flink 1.11.3 and Hadoop 3.3.1 snapshot, for Flink itself (so 
without using Hadoop) I've noticed the following libraries in use 
(unfortunately I don't get a path where, but somewhere in Flink they must be, 
or in a dependent jar?).

 

{{{"fixed in 
4.1.46","packageName":"io.netty_netty-codec","packageVersion":"4.1.34.Final"}}}

{{{"fixed in 
4.1.44","packageName":"io.netty_netty-codec","packageVersion":"4.1.34.Final"}}}

{{{"fixed in 
4.1.44","packageName":"io.netty_netty-codec","packageVersion":"4.1.34.Final"}}}{{}}

{{{fixed in 
4.1.42.Final","packageName":"io.netty_netty-codec","packageVersion":"4.1.34.Final"}}}

{{}}

https://issues.apache.org/jira/browse/HADOOP-17556 may be useful as well

Could we move up to Netty 4.1.46 (or something even newer?) across everything 
Flink's using? Again, I apologise for not having the paths to figure out what 
exactly is using it, but perhaps folks working directly with Flink may have a 
clue? Thanks

{{}}


> Upgrade io.netty netty-codec in Flink (four findings)
> -----------------------------------------------------
>
>                 Key: FLINK-21546
>                 URL: https://issues.apache.org/jira/browse/FLINK-21546
>             Project: Flink
>          Issue Type: Bug
>            Reporter: Adam Roberts
>            Priority: Major
>
> Hi everyone, have been raising plenty of JIRAs after doing a Twistlock 
> container scan for Flink 1.11.3 and Hadoop 3.3.1 snapshot, for Flink itself 
> (so without using Hadoop) I've noticed the following libraries in use 
> (unfortunately I don't get a path where, but somewhere in Flink they must be, 
> or in a dependent jar?).
>  
> {{{{}}{{{"fixed in 
> 4.1.46","packageName":"io.netty_netty-codec","packageVersion":"4.1.34.Final"}}}{{}}}}{{{{}}{{{"fixed
>  in 
> 4.1.44","packageName":"io.netty_netty-codec","packageVersion":"4.1.34.Final"}}}{{}}}}{{{{}}{{{"fixed
>  in 
> 4.1.44","packageName":"io.netty_netty-codec","packageVersion":"4.1.34.Final"}}}{{}}}}{{{{}}{{{fixed
>  in 
> 4.1.42.Final","packageName":"io.netty_netty-codec","packageVersion":"4.1.34.Final"}}}{{}}}}
>  
> https://issues.apache.org/jira/browse/HADOOP-17556 may be useful as well
> Could we move up to Netty 4.1.46 (or something even newer?) across everything 
> Flink's using? Again, I apologise for not having the paths to figure out what 
> exactly is using it, but perhaps folks working directly with Flink may have a 
> clue? Thanks
>  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to