Repository: hazelcast/hazelcast (language: java)

Issue:
Vulnerability in netty 4.1.99 [HZ-3424]
Hazelcast uses `netty` in version `4.1.99` which includes following vulnerability:
- CVE-2023-4586 - https://nvd.nist.gov/vuln/detail/CVE-2023-4586

It affects also HZ `5.3.z`, `5.2.z`, `5.1.z` and `5.0.z` stream.


Discussion / hints:

Fix patch:
diff --git a/pom.xml b/pom.xml
index bb66dab845001..86a296ca8abd5 100644
--- a/pom.xml
+++ b/pom.xml
@@ -116,7 +116,7 @@
         <reload4j.version>1.2.24</reload4j.version>
         <log4j2.version>2.20.0</log4j2.version>
         <mysql.connector.version>8.0.30</mysql.connector.version>
-        <netty.version>4.1.96.Final</netty.version>
+        <netty.version>4.1.100.Final</netty.version>
         <objenesis.version>3.3</objenesis.version>
         <osgi.version>4.2.0</osgi.version>
         <parquet.version>1.13.0</parquet.version>


Test patch: