Bret McGuire created CASSJAVA-137:
-------------------------------------
Summary: Bump Netty to (at least) 4.1.137.
Key: CASSJAVA-137
URL: https://issues.apache.org/jira/browse/CASSJAVA-137
Project: Apache Cassandra Java driver
Issue Type: Improvement
Components: Core
Reporter: Bret McGuire
Our last bump was to 4.1.130; that's been merged on 4.x and is [in-process on
3.x|https://github.com/apache/cassandra-java-driver/pull/2089] as I write this.
Newer versions of Netty have included a hefty number of CVE fixes, most
prominently [4.1.133|https://netty.io/news/2026/05/04/4-1-133-Final.html],
[4.1.135|https://netty.io/news/2026/06/02/4-1-135-Final.html] and
[4.1.136|https://netty.io/news/2026/07/09/4-1-136-Final.html].
Any such change should almost certainly go into 3.x, 4.x and trunk.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
