This is an automated email from the ASF dual-hosted git repository.
jinsongzhou pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/amoro.git
The following commit(s) were added to refs/heads/master by this push:
new 86be9bdcf [AMORO-3788] Bump Netty version to 4.1.124.Final to fix up
vulnerabilities in netty-codec-http2 (#3789)
86be9bdcf is described below
commit 86be9bdcfb5fd883a40fc522055c6d019f975af0
Author: zhangwl9 <[email protected]>
AuthorDate: Mon Sep 22 14:19:36 2025 +0800
[AMORO-3788] Bump Netty version to 4.1.124.Final to fix up vulnerabilities
in netty-codec-http2 (#3789)
Bump Netty version to 4.1.124.Final to fix up vulnerabilities in
netty-codec-http2
Co-authored-by: 张文领 <[email protected]>
---
pom.xml | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index b5c8d3244..58c7e8faf 100644
--- a/pom.xml
+++ b/pom.xml
@@ -134,7 +134,7 @@
<postgres-jdbc.version>42.7.2</postgres-jdbc.version>
<derby-jdbc.version>10.14.2.0</derby-jdbc.version>
<commons-dbcp2.version>2.9.0</commons-dbcp2.version>
- <netty.version>4.1.118.Final</netty.version>
+ <netty.version>4.1.124.Final</netty.version>
<javalin.version>4.6.8</javalin.version>
<kyuubi-hive-jdbc-shaded.version>1.6.0-incubating</kyuubi-hive-jdbc-shaded.version>
<rocksdb.version>7.10.2</rocksdb.version>
@@ -704,6 +704,12 @@
<version>${netty.version}</version>
</dependency>
+ <dependency>
+ <groupId>io.netty</groupId>
+ <artifactId>netty-codec-http2</artifactId>
+ <version>${netty.version}</version>
+ </dependency>
+
<dependency>
<groupId>org.apache.kyuubi</groupId>
<artifactId>kyuubi-hive-jdbc-shaded</artifactId>
