Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update netty.version to 4.1.89.Final #2311

Closed
wants to merge 1 commit into from
Closed

Conversation

rstosick
Copy link

@rstosick rstosick commented Jan 31, 2023

The version of netty used has a vulnerability and should be upgraded to the latest patch version.

https://security.snyk.io/vuln/SNYK-JAVA-IONETTY-3167773

Issue: #2310

Make sure that:

  • You have read the contribution guidelines.
  • You have created a feature request first to discuss your contribution intent. Please reference the feature request ticket number in the pull request.
  • You use the code formatters provided here and have them applied to your changes. Don’t submit any formatting related changes. N/A
  • You submit test cases (unit or integration tests) that back your changes.

@mp911de mp911de added the type: dependency-upgrade A dependency upgrade label Feb 14, 2023
@mp911de mp911de added this to the 6.2.3.RELEASE milestone Feb 14, 2023
@mp911de mp911de changed the title Update netty.version to 4.1.86.Final to fix a CVE Update netty.version to 4.1.89.Final Feb 14, 2023
mp911de added a commit that referenced this pull request Feb 14, 2023
mp911de added a commit that referenced this pull request Feb 14, 2023
@mp911de
Copy link
Collaborator

mp911de commented Feb 14, 2023

Thank you for your contribution. That's merged in the form of upgrading to Netty 4.1.89.Final

@mp911de mp911de closed this Feb 14, 2023
@rstosick rstosick deleted the patch-1 branch February 14, 2023 15:35
@mp911de mp911de mentioned this pull request Feb 14, 2023
3 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type: dependency-upgrade A dependency upgrade
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants