Skip to content

Commit 7052ba6

Browse files
norrszoewangg
andauthored
Upgrade netty from 4.1.77.Final to 4.1.86.Final (#3628)
Deals with CVE-2022-41915: GHSA-hh82-3pmq-7frp Probably deals with CVE-2022-41881 as well: GHSA-fx2c-96vj-985v https://nvd.nist.gov/vuln/detail/CVE-2022-41915 Co-authored-by: Zoe Wang <[email protected]>
1 parent babaa5d commit 7052ba6

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

pom.xml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -103,7 +103,7 @@
103103
<equalsverifier.version>3.7.1</equalsverifier.version>
104104
<!-- Update netty-open-ssl-version accordingly whenever we update netty version-->
105105
<!-- https://github.com/netty/netty/blob/4.1/pom.xml search "tcnative.version" -->
106-
<netty.version>4.1.77.Final</netty.version>
106+
<netty.version>4.1.86.Final</netty.version>
107107
<unitils.version>3.4.6</unitils.version>
108108
<xmlunit.version>1.3</xmlunit.version>
109109
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
@@ -127,7 +127,7 @@
127127
<jimfs.version>1.1</jimfs.version>
128128
<testng.version>7.1.0</testng.version> <!-- TCK Tests -->
129129
<commons-lang.verson>2.6</commons-lang.verson>
130-
<netty-open-ssl-version>2.0.52.Final</netty-open-ssl-version>
130+
<netty-open-ssl-version>2.0.54.Final</netty-open-ssl-version>
131131
<dynamodb-local.version>1.16.0</dynamodb-local.version>
132132
<sqllite.version>1.0.392</sqllite.version>
133133
<blockhound.version>1.0.6.RELEASE</blockhound.version>

0 commit comments

Comments
 (0)