This is an automated email from the ASF dual-hosted git repository. haonan pushed a commit to branch cp_cve_fix in repository https://gitbox.apache.org/repos/asf/iotdb.git
commit 74b5b996e8688842e1db3505ad182c4628c1778f Author: Haonan <[email protected]> AuthorDate: Mon Sep 8 14:30:34 2025 +0800 Upgrade netty and reactor (#16362) --- LICENSE-binary | 25 +++++++++++++------------ pom.xml | 8 ++++---- 2 files changed, 17 insertions(+), 16 deletions(-) diff --git a/LICENSE-binary b/LICENSE-binary index e43195403ea..83822262f73 100644 --- a/LICENSE-binary +++ b/LICENSE-binary @@ -247,18 +247,19 @@ org.apache.thrift:libthrift:0.14.1 io.dropwizard.metrics:metrics-core:4.2.19 io.dropwizard.metrics:metrics-jvm:3.2.2 com.librato.metrics:metrics-librato:5.1.0 -de.fraunhofer.iosb.io.moquette:moquette-broker:0.17 -io.netty:netty-buffer:4.1.110.Final -io.netty:netty-codec:4.1.110.Final -io.netty:netty-codec-http:4.1.110.Final -io.netty:netty-codec-mqtt:4.1.110.Final -io.netty:netty-common:4.1.110.Final -io.netty:netty-handler:4.1.110.Final -io.netty:netty-resolver:4.1.110.Final -io.netty:netty-transport:4.1.110.Final -io.netty:netty-transport-native-epoll:4.1.110.Final:linux-x86_64 -io.netty:netty-transport-native-unix-common:4.1.110.Final -com.nimbusds:nimbus-jose-jwt:9.37.3 +com.github.moquette-io.moquette:moquette-broker:0.18 +io.netty:netty-buffer:4.1.126.Final +io.netty:netty-codec:4.1.126.Final +io.netty:netty-codec-http:4.1.126.Final +io.netty:netty-codec-mqtt:4.1.126.Final +io.netty:netty-common:4.1.126.Final +io.netty:netty-handler:4.1.126.Final +io.netty:netty-resolver:4.1.126.Final +io.netty:netty-transport:4.1.126.Final +io.netty:netty-transport-native-epoll:4.1.126.Final:linux-aarch_64 +io.netty:netty-transport-native-epoll:4.1.126.Final:linux-x86_64 +io.netty:netty-transport-native-unix-common:4.1.126.Final +com.nimbusds:nimbus-jose-jwt:9.37.4 com.nimbusds:oauth2-oidc-sdk:10.15 org.osgi:org.osgi.core:7.0.0 org.osgi:osgi.cmpn:7.0.0 diff --git a/pom.xml b/pom.xml index 20815cfdb9f..4f048badf92 100644 --- a/pom.xml +++ b/pom.xml @@ -129,8 +129,8 @@ <!-- This was the last version to support Java 8 --> <!--mockito.version>4.11.0</mockito.version--> <moquette.version>0.18.0</moquette.version> - <netty.version>4.1.115.Final</netty.version> - <nimbus-jose-jwt.version>9.37.3</nimbus-jose-jwt.version> + <netty.version>4.1.126.Final</netty.version> + <nimbus-jose-jwt.version>9.37.4</nimbus-jose-jwt.version> <oauth2-oidc-sdk.version>10.15</oauth2-oidc-sdk.version> <!-- This was the last version to support Java 8 --> <openapi.generator.version>6.6.0</openapi.generator.version> @@ -146,8 +146,8 @@ --> <ratis.version>3.2.1</ratis.version> <reactive-streams.version>1.0.4</reactive-streams.version> - <reactor-netty.version>1.1.20</reactor-netty.version> - <reactor.version>3.5.18</reactor.version> + <reactor-netty.version>1.2.9</reactor-netty.version> + <reactor.version>3.7.9</reactor.version> <reflections.version>0.10.2</reflections.version> <slf4j.version>2.0.9</slf4j.version> <snappy-java.version>1.1.10.5</snappy-java.version>
