>From Michael Blow <[email protected]>:
Michael Blow has submitted this change. (
https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/21332?usp=email )
Change subject: [NO ISSUE][MISC] Upgrade Netty to 4.1.135 to address CVEs
......................................................................
[NO ISSUE][MISC] Upgrade Netty to 4.1.135 to address CVEs
- netty: 4.1.133.Final → 4.1.135.Final
(io.netty)
- netty.tcnative: 2.0.77.Final → 2.0.78.Final
(io.netty)
Ext-ref: MB-72294
Change-Id: Ie54519d22849aa27c877b9ad2707745df6cdc574
Reviewed-on: https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/21332
Tested-by: Michael Blow <[email protected]>
Reviewed-by: Ali Alsuliman <[email protected]>
Reviewed-by: Michael Blow <[email protected]>
---
M hyracks-fullstack/pom.xml
1 file changed, 42 insertions(+), 1 deletion(-)
Approvals:
Michael Blow: Looks good to me, but someone else must approve; Verified
Ali Alsuliman: Looks good to me, approved
diff --git a/hyracks-fullstack/pom.xml b/hyracks-fullstack/pom.xml
index 7d352f4..98b62c6 100644
--- a/hyracks-fullstack/pom.xml
+++ b/hyracks-fullstack/pom.xml
@@ -76,7 +76,8 @@
<jackson.version>2.21.4</jackson.version>
<jackson-annotations.version>2.21</jackson-annotations.version>
<jackson-databind.version>${jackson.version}</jackson-databind.version>
- <netty.version>4.1.133.Final</netty.version>
+ <netty.version>4.1.135.Final</netty.version>
+ <netty.tcnative.version>2.0.78.Final</netty.tcnative.version>
<asm.version>9.3</asm.version>
<awsjavasdk.version>2.44.14</awsjavasdk.version>
@@ -218,6 +219,46 @@
</exclusions>
</dependency>
<dependency>
+ <groupId>io.netty</groupId>
+ <artifactId>netty-tcnative-boringssl-static</artifactId>
+ <version>${netty.tcnative.version}</version>
+ </dependency>
+ <dependency>
+ <groupId>io.netty</groupId>
+ <artifactId>netty-tcnative-classes</artifactId>
+ <version>${netty.tcnative.version}</version>
+ </dependency>
+ <dependency>
+ <groupId>io.netty</groupId>
+ <artifactId>netty-tcnative-boringssl-static</artifactId>
+ <classifier>linux-x86_64</classifier>
+ <version>${netty.tcnative.version}</version>
+ </dependency>
+ <dependency>
+ <groupId>io.netty</groupId>
+ <artifactId>netty-tcnative-boringssl-static</artifactId>
+ <classifier>linux-aarch_64</classifier>
+ <version>${netty.tcnative.version}</version>
+ </dependency>
+ <dependency>
+ <groupId>io.netty</groupId>
+ <artifactId>netty-tcnative-boringssl-static</artifactId>
+ <classifier>osx-x86_64</classifier>
+ <version>${netty.tcnative.version}</version>
+ </dependency>
+ <dependency>
+ <groupId>io.netty</groupId>
+ <artifactId>netty-tcnative-boringssl-static</artifactId>
+ <classifier>osx-aarch_64</classifier>
+ <version>${netty.tcnative.version}</version>
+ </dependency>
+ <dependency>
+ <groupId>io.netty</groupId>
+ <artifactId>netty-tcnative-boringssl-static</artifactId>
+ <classifier>windows-x86_64</classifier>
+ <version>${netty.tcnative.version}</version>
+ </dependency>
+ <dependency>
<groupId>com.google.cloud</groupId>
<artifactId>google-cloud-core</artifactId>
<version>${google-cloud-core.version}</version>
--
To view, visit https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/21332?usp=email
To unsubscribe, or for help writing mail filters, visit
https://asterix-gerrit.ics.uci.edu/settings?usp=email
Gerrit-MessageType: merged
Gerrit-Project: asterixdb
Gerrit-Branch: lumina
Gerrit-Change-Id: Ie54519d22849aa27c877b9ad2707745df6cdc574
Gerrit-Change-Number: 21332
Gerrit-PatchSet: 2
Gerrit-Owner: Michael Blow <[email protected]>
Gerrit-Reviewer: Ali Alsuliman <[email protected]>
Gerrit-Reviewer: Hussain Towaileb <[email protected]>
Gerrit-Reviewer: Ian Maxon <[email protected]>
Gerrit-Reviewer: Michael Blow <[email protected]>
Gerrit-CC: Anon. E. Moose #1000171
Gerrit-CC: Jenkins <[email protected]>
