From a7aaa9c44f3caad255cbf1d1e164b646a6dcb610 Mon Sep 17 00:00:00 2001 From: atu-sharm <131497429+atu-sharm@users.noreply.github.com> Date: Thu, 26 Oct 2023 22:06:59 +0530 Subject: [PATCH] KAFKA-15644: Fix CVE-2023-4586 in netty:handler (#14584) Reviewers: Mickael Maison , Luke Chen --- LICENSE-binary | 18 +++++++++--------- gradle/dependencies.gradle | 2 +- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/LICENSE-binary b/LICENSE-binary index bed6c7cade4..0a9f626d7c6 100644 --- a/LICENSE-binary +++ b/LICENSE-binary @@ -241,15 +241,15 @@ lz4-java-1.8.0 maven-artifact-3.8.8 metrics-core-4.1.12.1 metrics-core-2.2.0 -netty-buffer-4.1.94.Final -netty-codec-4.1.94.Final -netty-common-4.1.94.Final -netty-handler-4.1.94.Final -netty-resolver-4.1.94.Final -netty-transport-4.1.94.Final -netty-transport-classes-epoll-4.1.94.Final -netty-transport-native-epoll-4.1.94.Final -netty-transport-native-unix-common-4.1.94.Final +netty-buffer-4.1.100.Final +netty-codec-4.1.100.Final +netty-common-4.1.100.Final +netty-handler-4.1.100.Final +netty-resolver-4.1.100.Final +netty-transport-4.1.100.Final +netty-transport-classes-epoll-4.1.100.Final +netty-transport-native-epoll-4.1.100.Final +netty-transport-native-unix-common-4.1.100.Final plexus-utils-3.3.0 reflections-0.10.2 reload4j-1.2.25 diff --git a/gradle/dependencies.gradle b/gradle/dependencies.gradle index f1892d77975..22d073341ac 100644 --- a/gradle/dependencies.gradle +++ b/gradle/dependencies.gradle @@ -146,7 +146,7 @@ versions += [ lz4: "1.8.0", mavenArtifact: "3.8.8", metrics: "2.2.0", - netty: "4.1.94.Final", + netty: "4.1.100.Final", pcollections: "4.0.1", powermock: "2.0.9", reflections: "0.10.2",