[tinkerpop] branch tp34 updated: Bump to Netty 4.1.42 fixes CVE-2019-16869 - CTR

[rd...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

rdale pushed a commit to branch tp34
in repository https://gitbox.apache.org/repos/asf/tinkerpop.git


The following commit(s) were added to refs/heads/tp34 by this push:
     new 9992aac  Bump to Netty 4.1.42 fixes CVE-2019-16869 - CTR
9992aac is described below

commit 9992aace295d6ef8070d7ec3d0ab6fab77f66dec
Author: Robert Dale <ro...@gmail.com>
AuthorDate: Tue Oct 22 20:58:27 2019 -0400

    Bump to Netty 4.1.42 fixes CVE-2019-16869 - CTR
---
 CHANGELOG.asciidoc | 2 ++
 pom.xml            | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.asciidoc b/CHANGELOG.asciidoc
index ee3eead..134865d 100644
--- a/CHANGELOG.asciidoc
+++ b/CHANGELOG.asciidoc
@@ -25,6 +25,8 @@ image::https://raw.githubusercontent.com/apache/tinkerpop/master/docs/static/ima
 
 This release also includes changes from <<release-3-3-10, 3.3.10>>.
 
+* Bump to Netty 4.1.42
+
 [[release-3-4-4]]
 === TinkerPop 3.4.4 (Release Date: October 14, 2019)
 
diff --git a/pom.xml b/pom.xml
index b38663a..a8677a4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -159,7 +159,7 @@ limitations under the License.
         <jcabi.version>1.1</jcabi.version>
         <log4j.version>1.2.17</log4j.version>
         <metrics.version>3.0.2</metrics.version>
-        <netty.version>4.1.36.Final</netty.version>
+        <netty.version>4.1.42.Final</netty.version>
         <slf4j.version>1.7.25</slf4j.version>
         <snakeyaml.version>1.15</snakeyaml.version>
         <spark.version>2.4.0</spark.version>