[
https://issues.apache.org/jira/browse/CASSJAVA-137?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Bret McGuire updated CASSJAVA-137:
----------------------------------
Summary: Bump Netty to (at least) 4.1.137 (was: Bump Netty to (at least)
4.1.137.)
> Bump Netty to (at least) 4.1.137
> --------------------------------
>
> Key: CASSJAVA-137
> URL: https://issues.apache.org/jira/browse/CASSJAVA-137
> Project: Apache Cassandra Java driver
> Issue Type: Improvement
> Components: Core
> Reporter: Bret McGuire
> Priority: Normal
> Fix For: 5.0.0
>
>
> Our last bump was to 4.1.130; that's been merged on 4.x and is [in-process on
> 3.x|https://github.com/apache/cassandra-java-driver/pull/2089] as I write
> this. Newer versions of Netty have included a hefty number of CVE fixes,
> most prominently
> [4.1.133|https://netty.io/news/2026/05/04/4-1-133-Final.html],
> [4.1.135|https://netty.io/news/2026/06/02/4-1-135-Final.html] and
> [4.1.136|https://netty.io/news/2026/07/09/4-1-136-Final.html].
> Any such change should almost certainly go into 3.x, 4.x and trunk.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
