Package
hadoop-fips-3.5
Component
netty-codec-http
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
netty-codec-http 4.1.131.Final is shaded inside hbase-shaded-netty-4.1.13.jar (hbase 2.6.6-hadoop3 / hbase-thirdparty 4.1.13). The fix is in netty 4.1.136.Final; hbase 2.6.6-hadoop3 and hbase-thirdparty 4.1.14 are the newest releases and both still shade netty 4.1.131.Final, and the classes live inside published uber jars that dependencyManagement cannot rewrite. Pending an upstream hbase-thirdparty release with a fixed netty and an hbase release consuming it.
Status
Previous location
/usr/share/m2/repository/org/apache/hbase/thirdparty/hbase-shaded-netty/4.1.11/hbase-shaded-netty-4.1.11.jarNew location
/usr/share/m2/repository/org/apache/hbase/thirdparty/hbase-shaded-netty/4.1.13/hbase-shaded-netty-4.1.13.jarImpact
version-only path change detected during APK rebuild
Status