This is an automated email from the ASF dual-hosted git repository.
alexey pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/kudu.git
The following commit(s) were added to refs/heads/master by this push:
new 892bda293 [java] update Netty from 4.1.73.Final to 4.1.84.Final
892bda293 is described below
commit 892bda293f238fddec47423d5c0b5be9576581f1
Author: Alexey Serbin <[email protected]>
AuthorDate: Thu Oct 27 22:42:45 2022 -0700
[java] update Netty from 4.1.73.Final to 4.1.84.Final
There was one CVE report on Netty since 4.1.73.Final [1] (affecting only
apps running Java version 6 or lower, though), so this patch updates
io.netty up to recently released 4.1.84.Final version [2] to address
that and pick up other bugfixes.
At least, this version update helps to keep security scanners happier.
[1] https://github.com/netty/netty/security/advisories/GHSA-269q-hmxg-m83q
[2] https://netty.io/news/2022/10/11/4-1-84-Final.html
Change-Id: I100ca755a4a994e0c2760d258e57a6074d5c60d7
Reviewed-on: http://gerrit.cloudera.org:8080/19176
Reviewed-by: Attila Bukor <[email protected]>
Tested-by: Alexey Serbin <[email protected]>
---
java/gradle/dependencies.gradle | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/java/gradle/dependencies.gradle b/java/gradle/dependencies.gradle
index 713dce82c..066659ee2 100755
--- a/java/gradle/dependencies.gradle
+++ b/java/gradle/dependencies.gradle
@@ -49,7 +49,7 @@ versions += [
micrometer : "1.8.2",
mockito : "4.2.0",
murmur : "1.0.0",
- netty : "4.1.73.Final",
+ netty : "4.1.84.Final",
osdetector : "1.6.2",
protobuf : "3.19.3",
ranger : "2.1.0",
