Does MySQL/clients use Netty?

1

Hi,

We are going through Security risk in netty-all-4.1.58.Final.jar used by Cassandra - Stack Overflow

I know MySQL is not in scope, just wanted to ensure if I am right in this case. Please confirm if MySQL or even any clients are in scope for this vulnerability.

Thank you

2

That very stackexchange link has the answer:

The issues with Netty has already been identified, assessed as “not applicable”, and added to the suppression list (CASSANDRA-17368).

This vulnerability seems specific to Java/Netty and not applicable to MySQL. If you can find a CVE related to MySQL, we can explore further.

3

Hi Matthew,

From what I read, possibly MariaDB client probably uses Netty (Not confident though).
Thanks for confirming it is not applicable for MySQL (percona).

Thank you