This is an automated email from the ASF dual-hosted git repository.

HTHou pushed a commit to branch dev/1.3
in repository https://gitbox.apache.org/repos/asf/iotdb.git


The following commit(s) were added to refs/heads/dev/1.3 by this push:
     new afcc36f0c76 Upgrade Netty for CVE fixes (#17760)
afcc36f0c76 is described below

commit afcc36f0c765e86ce0afbccf82f3d6b19c756735
Author: Haonan <[email protected]>
AuthorDate: Mon May 25 17:28:00 2026 +0800

    Upgrade Netty for CVE fixes (#17760)
---
 LICENSE-binary | 22 +++++++++++-----------
 pom.xml        |  2 +-
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/LICENSE-binary b/LICENSE-binary
index f3fadab3af8..e64118ab439 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -241,17 +241,17 @@ io.dropwizard.metrics:metrics-core:4.2.19
 io.dropwizard.metrics:metrics-jvm:3.2.2
 com.librato.metrics:metrics-librato:5.1.0
 com.github.moquette-io.moquette:moquette-broker:0.18
-io.netty:netty-buffer:4.1.126.Final
-io.netty:netty-codec:4.1.126.Final
-io.netty:netty-codec-http:4.1.126.Final
-io.netty:netty-codec-mqtt:4.1.126.Final
-io.netty:netty-common:4.1.126.Final
-io.netty:netty-handler:4.1.126.Final
-io.netty:netty-resolver:4.1.126.Final
-io.netty:netty-transport:4.1.126.Final
-io.netty:netty-transport-native-epoll:4.1.126.Final:linux-aarch_64
-io.netty:netty-transport-native-epoll:4.1.126.Final:linux-x86_64
-io.netty:netty-transport-native-unix-common:4.1.126.Final
+io.netty:netty-buffer:4.1.134.Final
+io.netty:netty-codec:4.1.134.Final
+io.netty:netty-codec-http:4.1.134.Final
+io.netty:netty-codec-mqtt:4.1.134.Final
+io.netty:netty-common:4.1.134.Final
+io.netty:netty-handler:4.1.134.Final
+io.netty:netty-resolver:4.1.134.Final
+io.netty:netty-transport:4.1.134.Final
+io.netty:netty-transport-native-epoll:4.1.134.Final:linux-aarch_64
+io.netty:netty-transport-native-epoll:4.1.134.Final:linux-x86_64
+io.netty:netty-transport-native-unix-common:4.1.134.Final
 org.osgi:org.osgi.core:7.0.0
 org.osgi:osgi.cmpn:7.0.0
 org.ops4j.pax.jdbc:pax-jdbc-common:1.5.6
diff --git a/pom.xml b/pom.xml
index cbe907c71b9..a83a66e135c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -126,7 +126,7 @@
         <!-- This was the last version to support Java 8 -->
         <!--mockito.version>4.11.0</mockito.version-->
         <moquette.version>0.18.0</moquette.version>
-        <netty.version>4.1.126.Final</netty.version>
+        <netty.version>4.1.134.Final</netty.version>
         <!-- This was the last version to support Java 8 -->
         <openapi.generator.version>6.6.0</openapi.generator.version>
         <osgi.version>7.0.0</osgi.version>

Reply via email to