[STORM-4078] Uplift Netty version to 4.1.112 - ASF Jira

XML

Word

Printable

JSON

Details

Type: Dependency upgrade
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 2.7.0
Component/s: storm-client, storm-server
Labels:
- dependency-upgrade
- pull-request-available

Description

Netty version 4.1.107.Final is shaded into storm-shaded-deps (with classes relocated to org/apache/storm/shade/io/netty). It now needs to be uplifted to remediate CVE-2024-29025. The latest available 4.x release for Netty is 4.1.112.Final.

Attachments

Issue Links

links to

GitHub Pull Request #168

Activity

People

Assignee:: Unassigned

Reporter:: Andrew Olson

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 23/Aug/24 17:22

Updated:: 26/Jan/25 09:31

Resolved:: 23/Aug/24 20:48