Andrew Olson created STORM-4078:
-----------------------------------
Summary: Uplift Netty version to 4.1.112
Key: STORM-4078
URL: https://issues.apache.org/jira/browse/STORM-4078
Project: Apache Storm
Issue Type: Dependency upgrade
Components: storm-client, storm-server
Reporter: Andrew Olson
Fix For: 2.7.0
Netty version {{4.1.107.Final}} is shaded into {{storm-shaded-deps}} (with
classes relocated to {{{}org/apache/storm/shade/io/netty{}}}). It now needs to
be uplifted to remediate
[CVE-2024-29025|https://nvd.nist.gov/vuln/detail/CVE-2024-29025]. The latest
available {{4.x}} release for Netty is {{{}4.1.112.Final{}}}.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
