This is an automated email from the ASF dual-hosted git repository.
stevel pushed a commit to branch branch-3.5
in repository https://gitbox.apache.org/repos/asf/hadoop.git
The following commit(s) were added to refs/heads/branch-3.5 by this push:
new fcee64e2ab2 HADOOP-19788 update netty dependency to 4.1.130.Final
(#8188)
fcee64e2ab2 is described below
commit fcee64e2ab263a4da65944f9f8cce5459e2efa6b
Author: Edward Capriolo <[email protected]>
AuthorDate: Wed Mar 11 06:59:32 2026 -0400
HADOOP-19788 update netty dependency to 4.1.130.Final (#8188)
Addresses CVE-2025-67735
Contributed by Edward Capriolo
---
LICENSE-binary | 62 +++++++++++++++++++++++++-------------------------
hadoop-project/pom.xml | 2 +-
2 files changed, 32 insertions(+), 32 deletions(-)
diff --git a/LICENSE-binary b/LICENSE-binary
index eb0ade4d0df..8171408c3a1 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -311,36 +311,36 @@ io.grpc:grpc-stub:1.69.0
io.grpc:grpc-stub:1.70.0
io.grpc:grpc-util:1.70.0
io.grpc:grpc-xds:1.70.0
-io.netty:netty-all:4.1.127.Final
-io.netty:netty-buffer:4.1.127.Final
-io.netty:netty-codec:4.1.127.Final
-io.netty:netty-codec-dns:4.1.127.Final
-io.netty:netty-codec-haproxy:4.1.127.Final
-io.netty:netty-codec-http:4.1.127.Final
-io.netty:netty-codec-http2:4.1.127.Final
-io.netty:netty-codec-memcache:4.1.127.Final
-io.netty:netty-codec-mqtt:4.1.127.Final
-io.netty:netty-codec-redis:4.1.127.Final
-io.netty:netty-codec-smtp:4.1.127.Final
-io.netty:netty-codec-socks:4.1.127.Final
-io.netty:netty-codec-stomp:4.1.127.Final
-io.netty:netty-codec-xml:4.1.127.Final
-io.netty:netty-common:4.1.127.Final
-io.netty:netty-handler:4.1.127.Final
-io.netty:netty-handler-proxy:4.1.127.Final
-io.netty:netty-resolver:4.1.127.Final
-io.netty:netty-resolver-dns:4.1.127.Final
-io.netty:netty-transport:4.1.127.Final
-io.netty:netty-transport-rxtx:4.1.127.Final
-io.netty:netty-transport-sctp:4.1.127.Final
-io.netty:netty-transport-udt:4.1.127.Final
-io.netty:netty-transport-classes-epoll:4.1.127.Final
-io.netty:netty-transport-native-unix-common:4.1.127.Final
-io.netty:netty-transport-classes-kqueue:4.1.127.Final
-io.netty:netty-resolver-dns-classes-macos:4.1.127.Final
-io.netty:netty-transport-native-epoll:4.1.127.Final
-io.netty:netty-transport-native-kqueue:4.1.127.Final
-io.netty:netty-resolver-dns-native-macos:4.1.127.Final
+io.netty:netty-all:4.1.130.Final
+io.netty:netty-buffer:4.1.130.Final
+io.netty:netty-codec:4.1.130.Final
+io.netty:netty-codec-dns:4.1.130.Final
+io.netty:netty-codec-haproxy:4.1.130.Final
+io.netty:netty-codec-http:4.1.130.Final
+io.netty:netty-codec-http2:4.1.130.Final
+io.netty:netty-codec-memcache:4.1.130.Final
+io.netty:netty-codec-mqtt:4.1.130.Final
+io.netty:netty-codec-redis:4.1.130.Final
+io.netty:netty-codec-smtp:4.1.130.Final
+io.netty:netty-codec-socks:4.1.130.Final
+io.netty:netty-codec-stomp:4.1.130.Final
+io.netty:netty-codec-xml:4.1.130.Final
+io.netty:netty-common:4.1.130.Final
+io.netty:netty-handler:4.1.130.Final
+io.netty:netty-handler-proxy:4.1.130.Final
+io.netty:netty-resolver:4.1.130.Final
+io.netty:netty-resolver-dns:4.1.130.Final
+io.netty:netty-transport:4.1.130.Final
+io.netty:netty-transport-rxtx:4.1.130.Final
+io.netty:netty-transport-sctp:4.1.130.Final
+io.netty:netty-transport-udt:4.1.130.Final
+io.netty:netty-transport-classes-epoll:4.1.130.Final
+io.netty:netty-transport-native-unix-common:4.1.130.Final
+io.netty:netty-transport-classes-kqueue:4.1.130.Final
+io.netty:netty-resolver-dns-classes-macos:4.1.130.Final
+io.netty:netty-transport-native-epoll:4.1.130.Final
+io.netty:netty-transport-native-kqueue:4.1.130.Final
+io.netty:netty-resolver-dns-native-macos:4.1.130.Final
io.opencensus:opencensus-api:0.12.3
io.opencensus:opencensus-api:0.31.1
io.opencensus:opencensus-contrib-grpc-metrics:0.12.3
@@ -694,4 +694,4 @@ isbot 5.1.27
Dom4J license
-------------
-org.dom4j:dom4j:2.1.4.jar
\ No newline at end of file
+org.dom4j:dom4j:2.1.4.jar
diff --git a/hadoop-project/pom.xml b/hadoop-project/pom.xml
index 9f815b02865..14436299bf8 100644
--- a/hadoop-project/pom.xml
+++ b/hadoop-project/pom.xml
@@ -152,7 +152,7 @@
<jna.version>5.2.0</jna.version>
<gson.version>2.9.0</gson.version>
<metrics.version>3.2.4</metrics.version>
- <netty4.version>4.1.127.Final</netty4.version>
+ <netty4.version>4.1.130.Final</netty4.version>
<snappy-java.version>1.1.10.4</snappy-java.version>
<lz4-java.version>1.10.4</lz4-java.version>
<byte-buddy.version>1.17.6</byte-buddy.version>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
