{ "document": { "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en-US", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Stackable GmbH and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "product-security@stackable.tech", "issuing_authority": "The Stackable Security Team is responsible for vulnerability handling across all Stackable offerings.", "name": "Stackable GmbH", "namespace": "https://www.stackable.tech/" }, "title": "Stackable Security Advisory for: CVE-2019-16869", "tracking": { "current_release_date": "2026-10-19T21:25:43.351374Z", "generator": { "engine": { "name": "SecObserve", "version": "1.60.1" } }, "id": "CVE-2019-16869", "initial_release_date": "2026-10-19T21:25:43.351374Z", "revision_history": [ { "date": "2026-10-19T21:25:43.351374Z", "number": "1", "summary": "Initial release" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "30.0.1-stackable26.3.0-amd64", "product": { "name": "druid:30.0.1-stackable26.3.0-amd64", "product_id": "pkg:oci/druid@sha256%3A5eb5d7166e92867d83ad7c6e4346ad34568ade0cd64f14ea94401340b424d307?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_identification_helper": { "purl": "pkg:oci/druid@sha256:5eb5d7166e92867d83ad7c6e4346ad34568ade0cd64f14ea94401340b424d307?arch=amd64&repository_url=oci.stackable.tech/sdp/druid" } } }, { "category": "product_version", "name": "34.0.0-stackable26.3.0-amd64", "product": { "name": "druid:34.0.0-stackable26.3.0-amd64", "product_id": "pkg:oci/druid@sha256%3Ac87d62adf7e039de905648ccdd82dc023e494d7ef6a24ea02423e71db6f300ef?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_identification_helper": { "purl": "pkg:oci/druid@sha256:c87d62adf7e039de905648ccdd82dc023e494d7ef6a24ea02423e71db6f300ef?arch=amd64&repository_url=oci.stackable.tech/sdp/druid" } } }, { "category": "product_version", "name": "35.0.1-stackable26.3.0-amd64", "product": { "name": "druid:35.0.1-stackable26.3.0-amd64", "product_id": "pkg:oci/druid@sha256%3A107df1bc5c1b034ffbe25ddbd6e55635b839e0914a192cc509eac840f1e55b79?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_identification_helper": { "purl": "pkg:oci/druid@sha256:107df1bc5c1b034ffbe25ddbd6e55635b839e0914a192cc509eac840f1e55b79?arch=amd64&repository_url=oci.stackable.tech/sdp/druid" } } }, { "category": "product_version", "name": "30.0.1-stackable26.7.0-amd64", "product": { "name": "druid:30.0.1-stackable26.7.0-amd64", "product_id": "pkg:oci/druid@sha256%3Af37a988e31d551a9b6c4500215827d88963b3b7ba4d3690283e58b3df7ffdcbc?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_identification_helper": { "purl": "pkg:oci/druid@sha256:f37a988e31d551a9b6c4500215827d88963b3b7ba4d3690283e58b3df7ffdcbc?arch=amd64&repository_url=oci.stackable.tech/sdp/druid" } } }, { "category": "product_version", "name": "35.0.1-stackable26.7.0-amd64", "product": { "name": "druid:35.0.1-stackable26.7.0-amd64", "product_id": "pkg:oci/druid@sha256%3Af01a441542030373bc284c246442a83b009ca3f8ad953b234da37202f9b407d5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_identification_helper": { "purl": "pkg:oci/druid@sha256:f01a441542030373bc284c246442a83b009ca3f8ad953b234da37202f9b407d5?arch=amd64&repository_url=oci.stackable.tech/sdp/druid" } } }, { "category": "product_version", "name": "37.0.0-stackable26.7.0-amd64", "product": { "name": "druid:37.0.0-stackable26.7.0-amd64", "product_id": "pkg:oci/druid@sha256%3A9d75afe11206c023262ab9f7c4348492e28879907b21640cad4604ccd99499df?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_identification_helper": { "purl": "pkg:oci/druid@sha256:9d75afe11206c023262ab9f7c4348492e28879907b21640cad4604ccd99499df?arch=amd64&repository_url=oci.stackable.tech/sdp/druid" } } } ], "category": "product_name", "name": "druid" }, { "branches": [ { "category": "product_version", "name": "3.3.6-stackable26.3.0-amd64", "product": { "name": "hadoop:3.3.6-stackable26.3.0-amd64", "product_id": "pkg:oci/hadoop@sha256%3Adcd72555e9da1ae7192813447a5458c7359ec3f1db2418bd567e308026ecbf08?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop", "product_identification_helper": { "purl": "pkg:oci/hadoop@sha256:dcd72555e9da1ae7192813447a5458c7359ec3f1db2418bd567e308026ecbf08?arch=amd64&repository_url=oci.stackable.tech/sdp/hadoop" } } }, { "category": "product_version", "name": "3.3.6-stackable26.7.0-amd64", "product": { "name": "hadoop:3.3.6-stackable26.7.0-amd64", "product_id": "pkg:oci/hadoop@sha256%3A73fc951df902bb150367f480377d6eb8f547ec47c7867887fe995aa92cbb2628?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop", "product_identification_helper": { "purl": "pkg:oci/hadoop@sha256:73fc951df902bb150367f480377d6eb8f547ec47c7867887fe995aa92cbb2628?arch=amd64&repository_url=oci.stackable.tech/sdp/hadoop" } } } ], "category": "product_name", "name": "hadoop" }, { "branches": [ { "category": "product_version", "name": "3.1.3-stackable26.3.0-amd64", "product": { "name": "hive:3.1.3-stackable26.3.0-amd64", "product_id": "pkg:oci/hive@sha256%3A127cfc9a2477d65e8ef484a688f9dbfdac1304e450e5f83e7b99f75e3dc147a2?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_identification_helper": { "purl": "pkg:oci/hive@sha256:127cfc9a2477d65e8ef484a688f9dbfdac1304e450e5f83e7b99f75e3dc147a2?arch=amd64&repository_url=oci.stackable.tech/sdp/hive" } } }, { "category": "product_version", "name": "4.0.0-stackable26.3.0-amd64", "product": { "name": "hive:4.0.0-stackable26.3.0-amd64", "product_id": "pkg:oci/hive@sha256%3A5967c36af24dddbdcb175c562f622ae4380bcaae60cd7242c389239297db0237?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_identification_helper": { "purl": "pkg:oci/hive@sha256:5967c36af24dddbdcb175c562f622ae4380bcaae60cd7242c389239297db0237?arch=amd64&repository_url=oci.stackable.tech/sdp/hive" } } }, { "category": "product_version", "name": "4.0.1-stackable26.3.0-amd64", "product": { "name": "hive:4.0.1-stackable26.3.0-amd64", "product_id": "pkg:oci/hive@sha256%3Ac09b73044a2eaac6f1ae7267f4acaa365cf9a43c5a5614f0e3a6939abd068a20?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_identification_helper": { "purl": "pkg:oci/hive@sha256:c09b73044a2eaac6f1ae7267f4acaa365cf9a43c5a5614f0e3a6939abd068a20?arch=amd64&repository_url=oci.stackable.tech/sdp/hive" } } }, { "category": "product_version", "name": "3.1.3-stackable26.7.0-amd64", "product": { "name": "hive:3.1.3-stackable26.7.0-amd64", "product_id": "pkg:oci/hive@sha256%3A1a681626ebe95cb095caf589562cbbbce4e53f078bfdd8eaf98f510af92feaca?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_identification_helper": { "purl": "pkg:oci/hive@sha256:1a681626ebe95cb095caf589562cbbbce4e53f078bfdd8eaf98f510af92feaca?arch=amd64&repository_url=oci.stackable.tech/sdp/hive" } } }, { "category": "product_version", "name": "4.0.0-stackable26.7.0-amd64", "product": { "name": "hive:4.0.0-stackable26.7.0-amd64", "product_id": "pkg:oci/hive@sha256%3Adac7f4ce599e4b788d477d5073c145658a933cc4fa4b0520d0e74839b553b208?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_identification_helper": { "purl": "pkg:oci/hive@sha256:dac7f4ce599e4b788d477d5073c145658a933cc4fa4b0520d0e74839b553b208?arch=amd64&repository_url=oci.stackable.tech/sdp/hive" } } }, { "category": "product_version", "name": "4.0.1-stackable26.7.0-amd64", "product": { "name": "hive:4.0.1-stackable26.7.0-amd64", "product_id": "pkg:oci/hive@sha256%3A0deeb02fc02e9e38df96e6aadfd873c029d1da8621d78d48cb273d9f26bf2d55?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_identification_helper": { "purl": "pkg:oci/hive@sha256:0deeb02fc02e9e38df96e6aadfd873c029d1da8621d78d48cb273d9f26bf2d55?arch=amd64&repository_url=oci.stackable.tech/sdp/hive" } } } ], "category": "product_name", "name": "hive" }, { "branches": [ { "category": "product_version", "name": "2.6.0-stackable26.3.0-amd64", "product": { "name": "nifi:2.6.0-stackable26.3.0-amd64", "product_id": "pkg:oci/nifi@sha256%3A6c3ff83ff818e3147a4e3215b296b896f28186d54a3c6eb6cddda4fe788d5c21?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi", "product_identification_helper": { "purl": "pkg:oci/nifi@sha256:6c3ff83ff818e3147a4e3215b296b896f28186d54a3c6eb6cddda4fe788d5c21?arch=amd64&repository_url=oci.stackable.tech/sdp/nifi" } } }, { "category": "product_version", "name": "2.6.0-stackable26.7.0-amd64", "product": { "name": "nifi:2.6.0-stackable26.7.0-amd64", "product_id": "pkg:oci/nifi@sha256%3A78a80f27d24721275f6b63841711820878aac84bc070f13cc7b3fe9c0f72bec2?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi", "product_identification_helper": { "purl": "pkg:oci/nifi@sha256:78a80f27d24721275f6b63841711820878aac84bc070f13cc7b3fe9c0f72bec2?arch=amd64&repository_url=oci.stackable.tech/sdp/nifi" } } } ], "category": "product_name", "name": "nifi" } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "30.0.1-stackable26.3.0-arm64", "product": { "name": "druid:30.0.1-stackable26.3.0-arm64", "product_id": "pkg:oci/druid@sha256%3A64715ec96a17a3bbefcfe31ec1b91eaa0d34eece879efee44856431ea5dc9855?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_identification_helper": { "purl": "pkg:oci/druid@sha256:64715ec96a17a3bbefcfe31ec1b91eaa0d34eece879efee44856431ea5dc9855?arch=arm64&repository_url=oci.stackable.tech/sdp/druid" } } }, { "category": "product_version", "name": "34.0.0-stackable26.3.0-arm64", "product": { "name": "druid:34.0.0-stackable26.3.0-arm64", "product_id": "pkg:oci/druid@sha256%3A74031482e83a91e33d3463f54a3c168d9233dbeb89372aa52cad03c044a818bd?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_identification_helper": { "purl": "pkg:oci/druid@sha256:74031482e83a91e33d3463f54a3c168d9233dbeb89372aa52cad03c044a818bd?arch=arm64&repository_url=oci.stackable.tech/sdp/druid" } } }, { "category": "product_version", "name": "35.0.1-stackable26.3.0-arm64", "product": { "name": "druid:35.0.1-stackable26.3.0-arm64", "product_id": "pkg:oci/druid@sha256%3A0e9385a4f2a0a7d5db2c236b9bcd43a7207fe9bb64f85fc40713c570b9c0b831?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_identification_helper": { "purl": "pkg:oci/druid@sha256:0e9385a4f2a0a7d5db2c236b9bcd43a7207fe9bb64f85fc40713c570b9c0b831?arch=arm64&repository_url=oci.stackable.tech/sdp/druid" } } }, { "category": "product_version", "name": "30.0.1-stackable26.7.0-arm64", "product": { "name": "druid:30.0.1-stackable26.7.0-arm64", "product_id": "pkg:oci/druid@sha256%3A4189d1e69c95dd782911d7d4ee2627de68bc11e9523995c4af326d4e27e81a3c?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_identification_helper": { "purl": "pkg:oci/druid@sha256:4189d1e69c95dd782911d7d4ee2627de68bc11e9523995c4af326d4e27e81a3c?arch=arm64&repository_url=oci.stackable.tech/sdp/druid" } } }, { "category": "product_version", "name": "35.0.1-stackable26.7.0-arm64", "product": { "name": "druid:35.0.1-stackable26.7.0-arm64", "product_id": "pkg:oci/druid@sha256%3A32c7f2491064536b74283f98ea8c416d2ecc9041aeb44d6ad81637dc886ad48d?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_identification_helper": { "purl": "pkg:oci/druid@sha256:32c7f2491064536b74283f98ea8c416d2ecc9041aeb44d6ad81637dc886ad48d?arch=arm64&repository_url=oci.stackable.tech/sdp/druid" } } }, { "category": "product_version", "name": "37.0.0-stackable26.7.0-arm64", "product": { "name": "druid:37.0.0-stackable26.7.0-arm64", "product_id": "pkg:oci/druid@sha256%3A5785bcca807f0397ad79a3a9545f15156b2c610f750af38d762bb6d1d1709d5c?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_identification_helper": { "purl": "pkg:oci/druid@sha256:5785bcca807f0397ad79a3a9545f15156b2c610f750af38d762bb6d1d1709d5c?arch=arm64&repository_url=oci.stackable.tech/sdp/druid" } } } ], "category": "product_name", "name": "druid" }, { "branches": [ { "category": "product_version", "name": "3.3.6-stackable26.3.0-arm64", "product": { "name": "hadoop:3.3.6-stackable26.3.0-arm64", "product_id": "pkg:oci/hadoop@sha256%3Ac12f9f2619d960dbb0fad183df6a2ce75d6d0559345c6cc0e800afc1637053bd?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop", "product_identification_helper": { "purl": "pkg:oci/hadoop@sha256:c12f9f2619d960dbb0fad183df6a2ce75d6d0559345c6cc0e800afc1637053bd?arch=arm64&repository_url=oci.stackable.tech/sdp/hadoop" } } }, { "category": "product_version", "name": "3.3.6-stackable26.7.0-arm64", "product": { "name": "hadoop:3.3.6-stackable26.7.0-arm64", "product_id": "pkg:oci/hadoop@sha256%3Aaf6298aee0cb0b3139254be46aac1cd00536a48d929671b2d73155ad19653cd2?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop", "product_identification_helper": { "purl": "pkg:oci/hadoop@sha256:af6298aee0cb0b3139254be46aac1cd00536a48d929671b2d73155ad19653cd2?arch=arm64&repository_url=oci.stackable.tech/sdp/hadoop" } } } ], "category": "product_name", "name": "hadoop" }, { "branches": [ { "category": "product_version", "name": "3.1.3-stackable26.3.0-arm64", "product": { "name": "hive:3.1.3-stackable26.3.0-arm64", "product_id": "pkg:oci/hive@sha256%3A970c656bbf69fb2ec5cdd082dd6ea8b55f6cc3292d069fc10e24bac95d3135ea?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_identification_helper": { "purl": "pkg:oci/hive@sha256:970c656bbf69fb2ec5cdd082dd6ea8b55f6cc3292d069fc10e24bac95d3135ea?arch=arm64&repository_url=oci.stackable.tech/sdp/hive" } } }, { "category": "product_version", "name": "4.0.0-stackable26.3.0-arm64", "product": { "name": "hive:4.0.0-stackable26.3.0-arm64", "product_id": "pkg:oci/hive@sha256%3Acded77f15b7fbfd2cd930cffff61effcb79890dd47cc60e9e6830e7e38a99775?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_identification_helper": { "purl": "pkg:oci/hive@sha256:cded77f15b7fbfd2cd930cffff61effcb79890dd47cc60e9e6830e7e38a99775?arch=arm64&repository_url=oci.stackable.tech/sdp/hive" } } }, { "category": "product_version", "name": "4.0.1-stackable26.3.0-arm64", "product": { "name": "hive:4.0.1-stackable26.3.0-arm64", "product_id": "pkg:oci/hive@sha256%3A1f11b84c760ff7bee0187763d7f56050795fa56b47ed48c74647ccb2849cb87d?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_identification_helper": { "purl": "pkg:oci/hive@sha256:1f11b84c760ff7bee0187763d7f56050795fa56b47ed48c74647ccb2849cb87d?arch=arm64&repository_url=oci.stackable.tech/sdp/hive" } } }, { "category": "product_version", "name": "3.1.3-stackable26.7.0-arm64", "product": { "name": "hive:3.1.3-stackable26.7.0-arm64", "product_id": "pkg:oci/hive@sha256%3A0e664e85eca084cd8fc3cc82c2e9e1f3c58f5bd8032a372cd123e9ca739199c3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_identification_helper": { "purl": "pkg:oci/hive@sha256:0e664e85eca084cd8fc3cc82c2e9e1f3c58f5bd8032a372cd123e9ca739199c3?arch=arm64&repository_url=oci.stackable.tech/sdp/hive" } } }, { "category": "product_version", "name": "4.0.0-stackable26.7.0-arm64", "product": { "name": "hive:4.0.0-stackable26.7.0-arm64", "product_id": "pkg:oci/hive@sha256%3A476748d810e89695509eaccddee9c7def45f51829e0b712d730649bdfbc51108?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_identification_helper": { "purl": "pkg:oci/hive@sha256:476748d810e89695509eaccddee9c7def45f51829e0b712d730649bdfbc51108?arch=arm64&repository_url=oci.stackable.tech/sdp/hive" } } }, { "category": "product_version", "name": "4.0.1-stackable26.7.0-arm64", "product": { "name": "hive:4.0.1-stackable26.7.0-arm64", "product_id": "pkg:oci/hive@sha256%3A2fa6bd010d5debb13a9da65194c5460e7e1aa5d3f2ab33d4e6e00069cc440f99?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_identification_helper": { "purl": "pkg:oci/hive@sha256:2fa6bd010d5debb13a9da65194c5460e7e1aa5d3f2ab33d4e6e00069cc440f99?arch=arm64&repository_url=oci.stackable.tech/sdp/hive" } } } ], "category": "product_name", "name": "hive" }, { "branches": [ { "category": "product_version", "name": "2.6.0-stackable26.3.0-arm64", "product": { "name": "nifi:2.6.0-stackable26.3.0-arm64", "product_id": "pkg:oci/nifi@sha256%3Ace993fec00718e182c3db95deb5b253d48eeb1479fbca95ac987b16d9b105684?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi", "product_identification_helper": { "purl": "pkg:oci/nifi@sha256:ce993fec00718e182c3db95deb5b253d48eeb1479fbca95ac987b16d9b105684?arch=arm64&repository_url=oci.stackable.tech/sdp/nifi" } } }, { "category": "product_version", "name": "2.6.0-stackable26.7.0-arm64", "product": { "name": "nifi:2.6.0-stackable26.7.0-arm64", "product_id": "pkg:oci/nifi@sha256%3A1ba42eae51e8a63af9cc1311cbacf401114ba702512778e3651e2f403edf5b73?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi", "product_identification_helper": { "purl": "pkg:oci/nifi@sha256:1ba42eae51e8a63af9cc1311cbacf401114ba702512778e3651e2f403edf5b73?arch=arm64&repository_url=oci.stackable.tech/sdp/nifi" } } } ], "category": "product_name", "name": "nifi" } ], "category": "architecture", "name": "arm64" } ], "category": "vendor", "name": "Stackable" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "3.10.6.Final", "product": { "name": "netty:3.10.6.Final", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar" } } }, { "category": "product_version", "name": "3.7.0.Final", "product": { "name": "netty:3.7.0.Final", "product_id": "pkg:maven/io.netty/netty@3.7.0.Final?type=jar", "product_identification_helper": { "purl": "pkg:maven/io.netty/netty@3.7.0.Final?type=jar" } } } ], "category": "product_name", "name": "netty" } ], "category": "vendor", "name": "io.netty" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A5eb5d7166e92867d83ad7c6e4346ad34568ade0cd64f14ea94401340b424d307?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A5eb5d7166e92867d83ad7c6e4346ad34568ade0cd64f14ea94401340b424d307?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/druid@sha256%3A5eb5d7166e92867d83ad7c6e4346ad34568ade0cd64f14ea94401340b424d307?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3Ac87d62adf7e039de905648ccdd82dc023e494d7ef6a24ea02423e71db6f300ef?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3Ac87d62adf7e039de905648ccdd82dc023e494d7ef6a24ea02423e71db6f300ef?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/druid@sha256%3Ac87d62adf7e039de905648ccdd82dc023e494d7ef6a24ea02423e71db6f300ef?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A107df1bc5c1b034ffbe25ddbd6e55635b839e0914a192cc509eac840f1e55b79?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A107df1bc5c1b034ffbe25ddbd6e55635b839e0914a192cc509eac840f1e55b79?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/druid@sha256%3A107df1bc5c1b034ffbe25ddbd6e55635b839e0914a192cc509eac840f1e55b79?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3Adcd72555e9da1ae7192813447a5458c7359ec3f1db2418bd567e308026ecbf08?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3Adcd72555e9da1ae7192813447a5458c7359ec3f1db2418bd567e308026ecbf08?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/hadoop@sha256%3Adcd72555e9da1ae7192813447a5458c7359ec3f1db2418bd567e308026ecbf08?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A127cfc9a2477d65e8ef484a688f9dbfdac1304e450e5f83e7b99f75e3dc147a2?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A127cfc9a2477d65e8ef484a688f9dbfdac1304e450e5f83e7b99f75e3dc147a2?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/hive@sha256%3A127cfc9a2477d65e8ef484a688f9dbfdac1304e450e5f83e7b99f75e3dc147a2?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A5967c36af24dddbdcb175c562f622ae4380bcaae60cd7242c389239297db0237?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A5967c36af24dddbdcb175c562f622ae4380bcaae60cd7242c389239297db0237?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/hive@sha256%3A5967c36af24dddbdcb175c562f622ae4380bcaae60cd7242c389239297db0237?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3Ac09b73044a2eaac6f1ae7267f4acaa365cf9a43c5a5614f0e3a6939abd068a20?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3Ac09b73044a2eaac6f1ae7267f4acaa365cf9a43c5a5614f0e3a6939abd068a20?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/hive@sha256%3Ac09b73044a2eaac6f1ae7267f4acaa365cf9a43c5a5614f0e3a6939abd068a20?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3A6c3ff83ff818e3147a4e3215b296b896f28186d54a3c6eb6cddda4fe788d5c21?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi", "product_id": "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3A6c3ff83ff818e3147a4e3215b296b896f28186d54a3c6eb6cddda4fe788d5c21?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi" }, "product_reference": "pkg:maven/io.netty/netty@3.7.0.Final?type=jar", "relates_to_product_reference": "pkg:oci/nifi@sha256%3A6c3ff83ff818e3147a4e3215b296b896f28186d54a3c6eb6cddda4fe788d5c21?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A64715ec96a17a3bbefcfe31ec1b91eaa0d34eece879efee44856431ea5dc9855?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A64715ec96a17a3bbefcfe31ec1b91eaa0d34eece879efee44856431ea5dc9855?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/druid@sha256%3A64715ec96a17a3bbefcfe31ec1b91eaa0d34eece879efee44856431ea5dc9855?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A74031482e83a91e33d3463f54a3c168d9233dbeb89372aa52cad03c044a818bd?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A74031482e83a91e33d3463f54a3c168d9233dbeb89372aa52cad03c044a818bd?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/druid@sha256%3A74031482e83a91e33d3463f54a3c168d9233dbeb89372aa52cad03c044a818bd?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A0e9385a4f2a0a7d5db2c236b9bcd43a7207fe9bb64f85fc40713c570b9c0b831?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A0e9385a4f2a0a7d5db2c236b9bcd43a7207fe9bb64f85fc40713c570b9c0b831?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/druid@sha256%3A0e9385a4f2a0a7d5db2c236b9bcd43a7207fe9bb64f85fc40713c570b9c0b831?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3Ac12f9f2619d960dbb0fad183df6a2ce75d6d0559345c6cc0e800afc1637053bd?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3Ac12f9f2619d960dbb0fad183df6a2ce75d6d0559345c6cc0e800afc1637053bd?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/hadoop@sha256%3Ac12f9f2619d960dbb0fad183df6a2ce75d6d0559345c6cc0e800afc1637053bd?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A970c656bbf69fb2ec5cdd082dd6ea8b55f6cc3292d069fc10e24bac95d3135ea?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A970c656bbf69fb2ec5cdd082dd6ea8b55f6cc3292d069fc10e24bac95d3135ea?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/hive@sha256%3A970c656bbf69fb2ec5cdd082dd6ea8b55f6cc3292d069fc10e24bac95d3135ea?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3Acded77f15b7fbfd2cd930cffff61effcb79890dd47cc60e9e6830e7e38a99775?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3Acded77f15b7fbfd2cd930cffff61effcb79890dd47cc60e9e6830e7e38a99775?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/hive@sha256%3Acded77f15b7fbfd2cd930cffff61effcb79890dd47cc60e9e6830e7e38a99775?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A1f11b84c760ff7bee0187763d7f56050795fa56b47ed48c74647ccb2849cb87d?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A1f11b84c760ff7bee0187763d7f56050795fa56b47ed48c74647ccb2849cb87d?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/hive@sha256%3A1f11b84c760ff7bee0187763d7f56050795fa56b47ed48c74647ccb2849cb87d?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3Ace993fec00718e182c3db95deb5b253d48eeb1479fbca95ac987b16d9b105684?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi", "product_id": "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3Ace993fec00718e182c3db95deb5b253d48eeb1479fbca95ac987b16d9b105684?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi" }, "product_reference": "pkg:maven/io.netty/netty@3.7.0.Final?type=jar", "relates_to_product_reference": "pkg:oci/nifi@sha256%3Ace993fec00718e182c3db95deb5b253d48eeb1479fbca95ac987b16d9b105684?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3Af37a988e31d551a9b6c4500215827d88963b3b7ba4d3690283e58b3df7ffdcbc?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3Af37a988e31d551a9b6c4500215827d88963b3b7ba4d3690283e58b3df7ffdcbc?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/druid@sha256%3Af37a988e31d551a9b6c4500215827d88963b3b7ba4d3690283e58b3df7ffdcbc?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3Af01a441542030373bc284c246442a83b009ca3f8ad953b234da37202f9b407d5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3Af01a441542030373bc284c246442a83b009ca3f8ad953b234da37202f9b407d5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/druid@sha256%3Af01a441542030373bc284c246442a83b009ca3f8ad953b234da37202f9b407d5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A9d75afe11206c023262ab9f7c4348492e28879907b21640cad4604ccd99499df?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A9d75afe11206c023262ab9f7c4348492e28879907b21640cad4604ccd99499df?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/druid@sha256%3A9d75afe11206c023262ab9f7c4348492e28879907b21640cad4604ccd99499df?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3A73fc951df902bb150367f480377d6eb8f547ec47c7867887fe995aa92cbb2628?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3A73fc951df902bb150367f480377d6eb8f547ec47c7867887fe995aa92cbb2628?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/hadoop@sha256%3A73fc951df902bb150367f480377d6eb8f547ec47c7867887fe995aa92cbb2628?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A1a681626ebe95cb095caf589562cbbbce4e53f078bfdd8eaf98f510af92feaca?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A1a681626ebe95cb095caf589562cbbbce4e53f078bfdd8eaf98f510af92feaca?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/hive@sha256%3A1a681626ebe95cb095caf589562cbbbce4e53f078bfdd8eaf98f510af92feaca?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3Adac7f4ce599e4b788d477d5073c145658a933cc4fa4b0520d0e74839b553b208?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3Adac7f4ce599e4b788d477d5073c145658a933cc4fa4b0520d0e74839b553b208?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/hive@sha256%3Adac7f4ce599e4b788d477d5073c145658a933cc4fa4b0520d0e74839b553b208?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A0deeb02fc02e9e38df96e6aadfd873c029d1da8621d78d48cb273d9f26bf2d55?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A0deeb02fc02e9e38df96e6aadfd873c029d1da8621d78d48cb273d9f26bf2d55?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/hive@sha256%3A0deeb02fc02e9e38df96e6aadfd873c029d1da8621d78d48cb273d9f26bf2d55?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3A78a80f27d24721275f6b63841711820878aac84bc070f13cc7b3fe9c0f72bec2?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi", "product_id": "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3A78a80f27d24721275f6b63841711820878aac84bc070f13cc7b3fe9c0f72bec2?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi" }, "product_reference": "pkg:maven/io.netty/netty@3.7.0.Final?type=jar", "relates_to_product_reference": "pkg:oci/nifi@sha256%3A78a80f27d24721275f6b63841711820878aac84bc070f13cc7b3fe9c0f72bec2?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A4189d1e69c95dd782911d7d4ee2627de68bc11e9523995c4af326d4e27e81a3c?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A4189d1e69c95dd782911d7d4ee2627de68bc11e9523995c4af326d4e27e81a3c?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/druid@sha256%3A4189d1e69c95dd782911d7d4ee2627de68bc11e9523995c4af326d4e27e81a3c?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A32c7f2491064536b74283f98ea8c416d2ecc9041aeb44d6ad81637dc886ad48d?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A32c7f2491064536b74283f98ea8c416d2ecc9041aeb44d6ad81637dc886ad48d?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/druid@sha256%3A32c7f2491064536b74283f98ea8c416d2ecc9041aeb44d6ad81637dc886ad48d?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A5785bcca807f0397ad79a3a9545f15156b2c610f750af38d762bb6d1d1709d5c?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A5785bcca807f0397ad79a3a9545f15156b2c610f750af38d762bb6d1d1709d5c?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/druid@sha256%3A5785bcca807f0397ad79a3a9545f15156b2c610f750af38d762bb6d1d1709d5c?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3Aaf6298aee0cb0b3139254be46aac1cd00536a48d929671b2d73155ad19653cd2?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3Aaf6298aee0cb0b3139254be46aac1cd00536a48d929671b2d73155ad19653cd2?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/hadoop@sha256%3Aaf6298aee0cb0b3139254be46aac1cd00536a48d929671b2d73155ad19653cd2?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A0e664e85eca084cd8fc3cc82c2e9e1f3c58f5bd8032a372cd123e9ca739199c3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A0e664e85eca084cd8fc3cc82c2e9e1f3c58f5bd8032a372cd123e9ca739199c3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/hive@sha256%3A0e664e85eca084cd8fc3cc82c2e9e1f3c58f5bd8032a372cd123e9ca739199c3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A476748d810e89695509eaccddee9c7def45f51829e0b712d730649bdfbc51108?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A476748d810e89695509eaccddee9c7def45f51829e0b712d730649bdfbc51108?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/hive@sha256%3A476748d810e89695509eaccddee9c7def45f51829e0b712d730649bdfbc51108?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A2fa6bd010d5debb13a9da65194c5460e7e1aa5d3f2ab33d4e6e00069cc440f99?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "product_id": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A2fa6bd010d5debb13a9da65194c5460e7e1aa5d3f2ab33d4e6e00069cc440f99?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, "product_reference": "pkg:maven/io.netty/netty@3.10.6.Final?type=jar", "relates_to_product_reference": "pkg:oci/hive@sha256%3A2fa6bd010d5debb13a9da65194c5460e7e1aa5d3f2ab33d4e6e00069cc440f99?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3A1ba42eae51e8a63af9cc1311cbacf401114ba702512778e3651e2f403edf5b73?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi", "product_id": "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3A1ba42eae51e8a63af9cc1311cbacf401114ba702512778e3651e2f403edf5b73?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi" }, "product_reference": "pkg:maven/io.netty/netty@3.7.0.Final?type=jar", "relates_to_product_reference": "pkg:oci/nifi@sha256%3A1ba42eae51e8a63af9cc1311cbacf401114ba702512778e3651e2f403edf5b73?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi" } ] }, "vulnerabilities": [ { "cve": "CVE-2019-16869", "flags": [ { "label": "vulnerable_code_not_in_execute_path", "product_ids": [ "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A5eb5d7166e92867d83ad7c6e4346ad34568ade0cd64f14ea94401340b424d307?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3Ac87d62adf7e039de905648ccdd82dc023e494d7ef6a24ea02423e71db6f300ef?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A107df1bc5c1b034ffbe25ddbd6e55635b839e0914a192cc509eac840f1e55b79?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3Adcd72555e9da1ae7192813447a5458c7359ec3f1db2418bd567e308026ecbf08?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A127cfc9a2477d65e8ef484a688f9dbfdac1304e450e5f83e7b99f75e3dc147a2?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A5967c36af24dddbdcb175c562f622ae4380bcaae60cd7242c389239297db0237?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3Ac09b73044a2eaac6f1ae7267f4acaa365cf9a43c5a5614f0e3a6939abd068a20?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3A6c3ff83ff818e3147a4e3215b296b896f28186d54a3c6eb6cddda4fe788d5c21?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A64715ec96a17a3bbefcfe31ec1b91eaa0d34eece879efee44856431ea5dc9855?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A74031482e83a91e33d3463f54a3c168d9233dbeb89372aa52cad03c044a818bd?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A0e9385a4f2a0a7d5db2c236b9bcd43a7207fe9bb64f85fc40713c570b9c0b831?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3Ac12f9f2619d960dbb0fad183df6a2ce75d6d0559345c6cc0e800afc1637053bd?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A970c656bbf69fb2ec5cdd082dd6ea8b55f6cc3292d069fc10e24bac95d3135ea?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3Acded77f15b7fbfd2cd930cffff61effcb79890dd47cc60e9e6830e7e38a99775?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A1f11b84c760ff7bee0187763d7f56050795fa56b47ed48c74647ccb2849cb87d?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3Ace993fec00718e182c3db95deb5b253d48eeb1479fbca95ac987b16d9b105684?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3Af37a988e31d551a9b6c4500215827d88963b3b7ba4d3690283e58b3df7ffdcbc?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3Af01a441542030373bc284c246442a83b009ca3f8ad953b234da37202f9b407d5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A9d75afe11206c023262ab9f7c4348492e28879907b21640cad4604ccd99499df?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3A73fc951df902bb150367f480377d6eb8f547ec47c7867887fe995aa92cbb2628?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A1a681626ebe95cb095caf589562cbbbce4e53f078bfdd8eaf98f510af92feaca?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3A78a80f27d24721275f6b63841711820878aac84bc070f13cc7b3fe9c0f72bec2?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A4189d1e69c95dd782911d7d4ee2627de68bc11e9523995c4af326d4e27e81a3c?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A32c7f2491064536b74283f98ea8c416d2ecc9041aeb44d6ad81637dc886ad48d?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A5785bcca807f0397ad79a3a9545f15156b2c610f750af38d762bb6d1d1709d5c?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3Aaf6298aee0cb0b3139254be46aac1cd00536a48d929671b2d73155ad19653cd2?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A0e664e85eca084cd8fc3cc82c2e9e1f3c58f5bd8032a372cd123e9ca739199c3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3A1ba42eae51e8a63af9cc1311cbacf401114ba702512778e3651e2f403edf5b73?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi" ] } ], "notes": [ { "category": "description", "text": "Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a \"Transfer-Encoding : chunked\" line), which leads to HTTP request smuggling.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3Adac7f4ce599e4b788d477d5073c145658a933cc4fa4b0520d0e74839b553b208?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A0deeb02fc02e9e38df96e6aadfd873c029d1da8621d78d48cb273d9f26bf2d55?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A476748d810e89695509eaccddee9c7def45f51829e0b712d730649bdfbc51108?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A2fa6bd010d5debb13a9da65194c5460e7e1aa5d3f2ab33d4e6e00069cc440f99?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" ], "known_not_affected": [ "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A5eb5d7166e92867d83ad7c6e4346ad34568ade0cd64f14ea94401340b424d307?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3Ac87d62adf7e039de905648ccdd82dc023e494d7ef6a24ea02423e71db6f300ef?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A107df1bc5c1b034ffbe25ddbd6e55635b839e0914a192cc509eac840f1e55b79?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3Adcd72555e9da1ae7192813447a5458c7359ec3f1db2418bd567e308026ecbf08?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A127cfc9a2477d65e8ef484a688f9dbfdac1304e450e5f83e7b99f75e3dc147a2?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A5967c36af24dddbdcb175c562f622ae4380bcaae60cd7242c389239297db0237?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3Ac09b73044a2eaac6f1ae7267f4acaa365cf9a43c5a5614f0e3a6939abd068a20?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3A6c3ff83ff818e3147a4e3215b296b896f28186d54a3c6eb6cddda4fe788d5c21?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A64715ec96a17a3bbefcfe31ec1b91eaa0d34eece879efee44856431ea5dc9855?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A74031482e83a91e33d3463f54a3c168d9233dbeb89372aa52cad03c044a818bd?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A0e9385a4f2a0a7d5db2c236b9bcd43a7207fe9bb64f85fc40713c570b9c0b831?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3Ac12f9f2619d960dbb0fad183df6a2ce75d6d0559345c6cc0e800afc1637053bd?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A970c656bbf69fb2ec5cdd082dd6ea8b55f6cc3292d069fc10e24bac95d3135ea?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3Acded77f15b7fbfd2cd930cffff61effcb79890dd47cc60e9e6830e7e38a99775?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A1f11b84c760ff7bee0187763d7f56050795fa56b47ed48c74647ccb2849cb87d?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3Ace993fec00718e182c3db95deb5b253d48eeb1479fbca95ac987b16d9b105684?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3Af37a988e31d551a9b6c4500215827d88963b3b7ba4d3690283e58b3df7ffdcbc?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3Af01a441542030373bc284c246442a83b009ca3f8ad953b234da37202f9b407d5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A9d75afe11206c023262ab9f7c4348492e28879907b21640cad4604ccd99499df?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3A73fc951df902bb150367f480377d6eb8f547ec47c7867887fe995aa92cbb2628?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A1a681626ebe95cb095caf589562cbbbce4e53f078bfdd8eaf98f510af92feaca?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3A78a80f27d24721275f6b63841711820878aac84bc070f13cc7b3fe9c0f72bec2?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A4189d1e69c95dd782911d7d4ee2627de68bc11e9523995c4af326d4e27e81a3c?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A32c7f2491064536b74283f98ea8c416d2ecc9041aeb44d6ad81637dc886ad48d?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A5785bcca807f0397ad79a3a9545f15156b2c610f750af38d762bb6d1d1709d5c?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3Aaf6298aee0cb0b3139254be46aac1cd00536a48d929671b2d73155ad19653cd2?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A0e664e85eca084cd8fc3cc82c2e9e1f3c58f5bd8032a372cd123e9ca739199c3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3A1ba42eae51e8a63af9cc1311cbacf401114ba702512778e3651e2f403edf5b73?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi" ] }, "references": [ { "category": "external", "summary": "Security Advisory", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16869" } ], "threats": [ { "category": "impact", "details": "Druid serves all of its HTTP endpoints with Jetty. Netty 3 is used only by Druid's own outbound HTTP client, whose pipeline in HttpClientPipelineFactory installs an HttpClientCodec for node-to-node calls. There is no Netty 3 ServerBootstrap or HttpRequestDecoder anywhere in the server code, so requests from users or from an Ingress / reverse proxy in front of the router never reach the vulnerable decoder. On the client side Netty only parses responses from other Druid processes in the same cluster, and an attacker who could forge those would already control a Druid node.", "product_ids": [ "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A5eb5d7166e92867d83ad7c6e4346ad34568ade0cd64f14ea94401340b424d307?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3Ac87d62adf7e039de905648ccdd82dc023e494d7ef6a24ea02423e71db6f300ef?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A107df1bc5c1b034ffbe25ddbd6e55635b839e0914a192cc509eac840f1e55b79?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A64715ec96a17a3bbefcfe31ec1b91eaa0d34eece879efee44856431ea5dc9855?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A74031482e83a91e33d3463f54a3c168d9233dbeb89372aa52cad03c044a818bd?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A0e9385a4f2a0a7d5db2c236b9bcd43a7207fe9bb64f85fc40713c570b9c0b831?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3Af37a988e31d551a9b6c4500215827d88963b3b7ba4d3690283e58b3df7ffdcbc?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3Af01a441542030373bc284c246442a83b009ca3f8ad953b234da37202f9b407d5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A9d75afe11206c023262ab9f7c4348492e28879907b21640cad4604ccd99499df?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A4189d1e69c95dd782911d7d4ee2627de68bc11e9523995c4af326d4e27e81a3c?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A32c7f2491064536b74283f98ea8c416d2ecc9041aeb44d6ad81637dc886ad48d?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/druid@sha256%3A5785bcca807f0397ad79a3a9545f15156b2c610f750af38d762bb6d1d1709d5c?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fdruid" ] }, { "category": "impact", "details": "In Hadoop 3.3.6 the only code using Netty 3 is the MapReduce shuffle service (org.apache.hadoop.mapred.ShuffleHandler in hadoop-mapreduce-client-shuffle), which runs as an auxiliary service inside a YARN NodeManager. The Stackable HDFS operator runs only NameNode, DataNode, JournalNode and ZKFC, and no YARN NodeManager is ever started from this image. The HDFS web UIs and WebHDFS are served by Jetty and the Netty 4 based DataNode web server, neither of which uses the Netty 3 decoder. The jar is on the classpath as a declared dependency, but the vulnerable decoder is never instantiated.", "product_ids": [ "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3Adcd72555e9da1ae7192813447a5458c7359ec3f1db2418bd567e308026ecbf08?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3Ac12f9f2619d960dbb0fad183df6a2ce75d6d0559345c6cc0e800afc1637053bd?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3A73fc951df902bb150367f480377d6eb8f547ec47c7867887fe995aa92cbb2628?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hadoop@sha256%3Aaf6298aee0cb0b3139254be46aac1cd00536a48d929671b2d73155ad19653cd2?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhadoop" ] }, { "category": "impact", "details": "The Hive image contains only the standalone Hive Metastore, which serves clients over Thrift on port 9083 and has no web UI. Netty 3 arrives through the bundled Hadoop 3.3.6 distribution (share/hadoop/hdfs/lib) and, for Hive 3.1.3, also as a shaded copy inside the hive-metastore-opa-authorizer fat jar, pulled in transitively from hadoop-hdfs, the MapReduce client jars and ZooKeeper 3.4. The Hive modules that use Netty 3 directly (llap-server ShuffleHandler, druid-handler) are not shipped in the image. The metastore never creates a Netty 3 HTTP server, so the vulnerable decoder is not reachable.", "product_ids": [ "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A127cfc9a2477d65e8ef484a688f9dbfdac1304e450e5f83e7b99f75e3dc147a2?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A5967c36af24dddbdcb175c562f622ae4380bcaae60cd7242c389239297db0237?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3Ac09b73044a2eaac6f1ae7267f4acaa365cf9a43c5a5614f0e3a6939abd068a20?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A970c656bbf69fb2ec5cdd082dd6ea8b55f6cc3292d069fc10e24bac95d3135ea?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3Acded77f15b7fbfd2cd930cffff61effcb79890dd47cc60e9e6830e7e38a99775?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A1f11b84c760ff7bee0187763d7f56050795fa56b47ed48c74647ccb2849cb87d?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A1a681626ebe95cb095caf589562cbbbce4e53f078bfdd8eaf98f510af92feaca?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fhive", "pkg:maven/io.netty/netty@3.10.6.Final?type=jar@pkg:oci/hive@sha256%3A0e664e85eca084cd8fc3cc82c2e9e1f3c58f5bd8032a372cd123e9ca739199c3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fhive" ] }, { "category": "impact", "details": "In NiFi, Netty 3.7.0 is only present inside the nifi-iceberg-processors NAR, where it comes in transitively via ZooKeeper 3.4.6 (through the Hive 3.1.3 metastore client and Hadoop 2.6.0 libraries). Those processors talk to the Hive Metastore over Thrift and to object storage or HDFS through Hadoop's file system clients. ZooKeeper uses Netty only for its binary client/server protocol and the 3.4 client defaults to NIO. Nothing in the NAR starts a Netty 3 HTTP server, and the NiFi UI/REST API on 8443 is served by Jetty, so requests passing through an Ingress or reverse proxy never reach the vulnerable decoder.", "product_ids": [ "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3A6c3ff83ff818e3147a4e3215b296b896f28186d54a3c6eb6cddda4fe788d5c21?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi", "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3Ace993fec00718e182c3db95deb5b253d48eeb1479fbca95ac987b16d9b105684?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi", "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3A78a80f27d24721275f6b63841711820878aac84bc070f13cc7b3fe9c0f72bec2?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi", "pkg:maven/io.netty/netty@3.7.0.Final?type=jar@pkg:oci/nifi@sha256%3A1ba42eae51e8a63af9cc1311cbacf401114ba702512778e3651e2f403edf5b73?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fnifi" ] } ], "title": "CVE-2019-16869" } ] }