[
https://issues.apache.org/jira/browse/HADOOP-19878?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18078771#comment-18078771
]
ASF GitHub Bot commented on HADOOP-19878:
-----------------------------------------
pan3793 commented on code in PR #8469:
URL: https://github.com/apache/hadoop/pull/8469#discussion_r3196709182
##########
LICENSE-binary:
##########
@@ -309,36 +309,36 @@ io.grpc:grpc-stub:1.69.0
io.grpc:grpc-stub:1.70.0
io.grpc:grpc-util:1.70.0
io.grpc:grpc-xds:1.70.0
-io.netty:netty-all:4.1.130.Final
-io.netty:netty-buffer:4.1.130.Final
-io.netty:netty-codec:4.1.130.Final
-io.netty:netty-codec-dns:4.1.130.Final
-io.netty:netty-codec-haproxy:4.1.130.Final
-io.netty:netty-codec-http:4.1.130.Final
-io.netty:netty-codec-http2:4.1.130.Final
-io.netty:netty-codec-memcache:4.1.130.Final
-io.netty:netty-codec-mqtt:4.1.130.Final
-io.netty:netty-codec-redis:4.1.130.Final
-io.netty:netty-codec-smtp:4.1.130.Final
-io.netty:netty-codec-socks:4.1.130.Final
-io.netty:netty-codec-stomp:4.1.130.Final
-io.netty:netty-codec-xml:4.1.130.Final
-io.netty:netty-common:4.1.130.Final
-io.netty:netty-handler:4.1.130.Final
-io.netty:netty-handler-proxy:4.1.130.Final
-io.netty:netty-resolver:4.1.130.Final
-io.netty:netty-resolver-dns:4.1.130.Final
-io.netty:netty-transport:4.1.130.Final
-io.netty:netty-transport-rxtx:4.1.130.Final
-io.netty:netty-transport-sctp:4.1.130.Final
-io.netty:netty-transport-udt:4.1.130.Final
-io.netty:netty-transport-classes-epoll:4.1.130.Final
-io.netty:netty-transport-native-unix-common:4.1.130.Final
-io.netty:netty-transport-classes-kqueue:4.1.130.Final
-io.netty:netty-resolver-dns-classes-macos:4.1.130.Final
-io.netty:netty-transport-native-epoll:4.1.130.Final
-io.netty:netty-transport-native-kqueue:4.1.130.Final
-io.netty:netty-resolver-dns-native-macos:4.1.130.Final
+io.netty:netty-all:4.1.133.Final
+io.netty:netty-buffer:4.1.133.Final
+io.netty:netty-codec:4.1.133.Final
+io.netty:netty-codec-dns:4.1.133.Final
+io.netty:netty-codec-haproxy:4.1.133.Final
+io.netty:netty-codec-http:4.1.133.Final
+io.netty:netty-codec-http2:4.1.133.Final
+io.netty:netty-codec-memcache:4.1.133.Final
+io.netty:netty-codec-mqtt:4.1.133.Final
+io.netty:netty-codec-redis:4.1.133.Final
Review Comment:
are all those netty libs used by hadoop? I don't think hadoop requires
`netty-codec-redis` ...
> Upgrade Netty 4.1.113 due to multiple CVEs
> ------------------------------------------
>
> Key: HADOOP-19878
> URL: https://issues.apache.org/jira/browse/HADOOP-19878
> Project: Hadoop Common
> Issue Type: Task
> Reporter: PJ Fanning
> Priority: Major
> Labels: pull-request-available
>
> https://netty.io/news/2026/05/04/4-1-133-Final.html
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]