Skip to content

Commit a55ace7

Browse files
authored
HADOOP-18079. Upgrade Netty to 4.1.77. (apache#3977)
Upgrade netty to address CVE-2019-20444, CVE-2019-20445 CVE-2022-24823 Contributed by Wei-Chiu Chuang
1 parent 34e548c commit a55ace7

File tree

2 files changed

+91
-12
lines changed

2 files changed

+91
-12
lines changed

LICENSE-binary

Lines changed: 30 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -261,17 +261,36 @@ io.grpc:grpc-protobuf:1.26.0
261261
io.grpc:grpc-protobuf-lite:1.26.0
262262
io.grpc:grpc-stub:1.26.0
263263
io.netty:netty:3.10.6.Final
264-
io.netty:netty-all:4.1.42.Final
265-
io.netty:netty-buffer:4.1.27.Final
266-
io.netty:netty-codec:4.1.27.Final
267-
io.netty:netty-codec-http:4.1.27.Final
268-
io.netty:netty-codec-http2:4.1.27.Final
269-
io.netty:netty-codec-socks:4.1.27.Final
270-
io.netty:netty-common:4.1.27.Final
271-
io.netty:netty-handler:4.1.27.Final
272-
io.netty:netty-handler-proxy:4.1.27.Final
273-
io.netty:netty-resolver:4.1.27.Final
274-
io.netty:netty-transport:4.1.27.Final
264+
io.netty:netty-all:4.1.77.Final
265+
io.netty:netty-buffer:4.1.77.Final
266+
io.netty:netty-codec:4.1.77.Final
267+
io.netty:netty-codec-dns:4.1.77.Final
268+
io.netty:netty-codec-haproxy:4.1.77.Final
269+
io.netty:netty-codec-http:4.1.77.Final
270+
io.netty:netty-codec-http2:4.1.77.Final
271+
io.netty:netty-codec-memcache:4.1.77.Final
272+
io.netty:netty-codec-mqtt:4.1.77.Final
273+
io.netty:netty-codec-redis:4.1.77.Final
274+
io.netty:netty-codec-smtp:4.1.77.Final
275+
io.netty:netty-codec-socks:4.1.77.Final
276+
io.netty:netty-codec-stomp:4.1.77.Final
277+
io.netty:netty-codec-xml:4.1.77.Final
278+
io.netty:netty-common:4.1.77.Final
279+
io.netty:netty-handler:4.1.77.Final
280+
io.netty:netty-handler-proxy:4.1.77.Final
281+
io.netty:netty-resolver:4.1.77.Final
282+
io.netty:netty-resolver-dns:4.1.77.Final
283+
io.netty:netty-transport:4.1.77.Final
284+
io.netty:netty-transport-rxtx:4.1.77.Final
285+
io.netty:netty-transport-sctp:4.1.77.Final
286+
io.netty:netty-transport-udt:4.1.77.Final
287+
io.netty:netty-transport-classes-epoll:4.1.77.Final
288+
io.netty:netty-transport-native-unix-common:4.1.77.Final
289+
io.netty:netty-transport-classes-kqueue:4.1.77.Final
290+
io.netty:netty-resolver-dns-classes-macos:4.1.77.Final
291+
io.netty:netty-transport-native-epoll:4.1.77.Final
292+
io.netty:netty-transport-native-kqueue:4.1.77.Final
293+
io.netty:netty-resolver-dns-native-macos:4.1.77.Final
275294
io.opencensus:opencensus-api:0.12.3
276295
io.opencensus:opencensus-contrib-grpc-metrics:0.12.3
277296
io.reactivex:rxjava:1.3.8

hadoop-project/pom.xml

Lines changed: 61 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -141,7 +141,7 @@
141141
<gson.version>2.9.0</gson.version>
142142
<metrics.version>3.2.4</metrics.version>
143143
<netty3.version>3.10.6.Final</netty3.version>
144-
<netty4.version>4.1.68.Final</netty4.version>
144+
<netty4.version>4.1.77.Final</netty4.version>
145145
<snappy-java.version>1.1.8.2</snappy-java.version>
146146
<lz4-java.version>1.7.1</lz4-java.version>
147147

@@ -983,6 +983,66 @@
983983
<version>${netty4.version}</version>
984984
</dependency>
985985

986+
<dependency>
987+
<groupId>io.netty</groupId>
988+
<artifactId>netty-codec-socks</artifactId>
989+
<version>${netty4.version}</version>
990+
</dependency>
991+
992+
<dependency>
993+
<groupId>io.netty</groupId>
994+
<artifactId>netty-handler-proxy</artifactId>
995+
<version>${netty4.version}</version>
996+
</dependency>
997+
998+
<dependency>
999+
<groupId>io.netty</groupId>
1000+
<artifactId>netty-resolver</artifactId>
1001+
<version>${netty4.version}</version>
1002+
</dependency>
1003+
1004+
<dependency>
1005+
<groupId>io.netty</groupId>
1006+
<artifactId>netty-handler</artifactId>
1007+
<version>${netty4.version}</version>
1008+
</dependency>
1009+
1010+
<dependency>
1011+
<groupId>io.netty</groupId>
1012+
<artifactId>netty-buffer</artifactId>
1013+
<version>${netty4.version}</version>
1014+
</dependency>
1015+
1016+
<dependency>
1017+
<groupId>io.netty</groupId>
1018+
<artifactId>netty-transport</artifactId>
1019+
<version>${netty4.version}</version>
1020+
</dependency>
1021+
1022+
<dependency>
1023+
<groupId>io.netty</groupId>
1024+
<artifactId>netty-common</artifactId>
1025+
<version>${netty4.version}</version>
1026+
</dependency>
1027+
1028+
<dependency>
1029+
<groupId>io.netty</groupId>
1030+
<artifactId>netty-transport-native-unix-common</artifactId>
1031+
<version>${netty4.version}</version>
1032+
</dependency>
1033+
1034+
<dependency>
1035+
<groupId>io.netty</groupId>
1036+
<artifactId>netty-transport-native-epoll</artifactId>
1037+
<version>${netty4.version}</version>
1038+
</dependency>
1039+
1040+
<dependency>
1041+
<groupId>io.netty</groupId>
1042+
<artifactId>netty-codec</artifactId>
1043+
<version>${netty4.version}</version>
1044+
</dependency>
1045+
9861046
<dependency>
9871047
<groupId>commons-io</groupId>
9881048
<artifactId>commons-io</artifactId>

0 commit comments

Comments
 (0)