You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@skywalking.apache.org by GitBox <gi...@apache.org> on 2021/12/06 08:10:35 UTC

[GitHub] [skywalking] kezhenxu94 edited a comment on issue #8249: [Bug] Earlier versions of netty-codec or other jar packages have security breach in agent 8.8.0

kezhenxu94 edited a comment on issue #8249:
URL: https://github.com/apache/skywalking/issues/8249#issuecomment-986528393


   the netty version is 4.1.68.Final in 8.9.0 and master branch, we typically won't back port CVEs to all previous versions, instead, we encourage users to upgrade to the latest SkyWalking if possible
   
   https://github.com/apache/skywalking/blob/1fdf3a8acf0b86be276d4a6cd288ae9c23e9aa42/oap-server-bom/pom.xml#L63
   
   UPDATE:
   
   Sorry didn't notice what you said agent side, and yes it's still 4.1.51.Final in Java agent, we haven't released java agent 8.9.0 yet


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@skywalking.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org