This is an automated email from the ASF dual-hosted git repository.
srowen pushed a commit to branch branch-2.4
in repository https://gitbox.apache.org/repos/asf/spark.git
The following commit(s) were added to refs/heads/branch-2.4 by this push:
new b2f96a5 [SPARK-29445][CORE] Bump netty-all from 4.1.39.Final to
4.1.42.Final
b2f96a5 is described below
commit b2f96a5819e133298007b25f45b5294222e0bad3
Author: Fokko Driesprong <[email protected]>
AuthorDate: Sat Oct 12 09:43:16 2019 -0500
[SPARK-29445][CORE] Bump netty-all from 4.1.39.Final to 4.1.42.Final
Minor version bump of Netty to patch reported CVE.
Patches: https://www.cvedetails.com/cve/CVE-2019-16869/
No
Compiled locally using `mvn clean install -DskipTests`
Closes #26099 from Fokko/SPARK-29445.
Authored-by: Fokko Driesprong <[email protected]>
Signed-off-by: Sean Owen <[email protected]>
(cherry picked from commit b5b1b69f79fed4e1cd83484302e70d894058d84a)
Signed-off-by: Sean Owen <[email protected]>
---
dev/deps/spark-deps-hadoop-2.6 | 2 +-
dev/deps/spark-deps-hadoop-2.7 | 2 +-
dev/deps/spark-deps-hadoop-3.1 | 2 +-
pom.xml | 2 +-
4 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/dev/deps/spark-deps-hadoop-2.6 b/dev/deps/spark-deps-hadoop-2.6
index 960f2cb..8e46582 100644
--- a/dev/deps/spark-deps-hadoop-2.6
+++ b/dev/deps/spark-deps-hadoop-2.6
@@ -149,7 +149,7 @@ metrics-json-3.1.5.jar
metrics-jvm-3.1.5.jar
minlog-1.3.0.jar
netty-3.9.9.Final.jar
-netty-all-4.1.39.Final.jar
+netty-all-4.1.42.Final.jar
objenesis-2.5.1.jar
okhttp-3.8.1.jar
okio-1.13.0.jar
diff --git a/dev/deps/spark-deps-hadoop-2.7 b/dev/deps/spark-deps-hadoop-2.7
index 1b3e274..87b7c9c 100644
--- a/dev/deps/spark-deps-hadoop-2.7
+++ b/dev/deps/spark-deps-hadoop-2.7
@@ -150,7 +150,7 @@ metrics-json-3.1.5.jar
metrics-jvm-3.1.5.jar
minlog-1.3.0.jar
netty-3.9.9.Final.jar
-netty-all-4.1.39.Final.jar
+netty-all-4.1.42.Final.jar
objenesis-2.5.1.jar
okhttp-3.8.1.jar
okio-1.13.0.jar
diff --git a/dev/deps/spark-deps-hadoop-3.1 b/dev/deps/spark-deps-hadoop-3.1
index 432bcc7..6789cb9 100644
--- a/dev/deps/spark-deps-hadoop-3.1
+++ b/dev/deps/spark-deps-hadoop-3.1
@@ -167,7 +167,7 @@ metrics-jvm-3.1.5.jar
minlog-1.3.0.jar
mssql-jdbc-6.2.1.jre7.jar
netty-3.9.9.Final.jar
-netty-all-4.1.39.Final.jar
+netty-all-4.1.42.Final.jar
nimbus-jose-jwt-4.41.1.jar
objenesis-2.5.1.jar
okhttp-2.7.5.jar
diff --git a/pom.xml b/pom.xml
index b805cc7..f79e388 100644
--- a/pom.xml
+++ b/pom.xml
@@ -589,7 +589,7 @@
<dependency>
<groupId>io.netty</groupId>
<artifactId>netty-all</artifactId>
- <version>4.1.39.Final</version>
+ <version>4.1.42.Final</version>
</dependency>
<dependency>
<groupId>io.netty</groupId>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
