You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@kudu.apache.org by "Alexey Serbin (Code Review)" <ge...@cloudera.org> on 2022/10/28 17:05:42 UTC

[kudu-CR] [java] update Netty from 4.1.73.Final to 4.1.84.Final

Alexey Serbin has uploaded this change for review. ( http://gerrit.cloudera.org:8080/19176


Change subject: [java] update Netty from 4.1.73.Final to 4.1.84.Final
......................................................................

[java] update Netty from 4.1.73.Final to 4.1.84.Final

There was one CVE report on Netty since 4.1.73.Final [1] (affecting
only apps running Java version 6 or lower), so this patch updates
io.netty up to recently released 4.1.84.Final version [2] to address
that and pick up other bugfixes.

[1] https://github.com/netty/netty/security/advisories/GHSA-269q-hmxg-m83q
[2] https://netty.io/news/2022/10/11/4-1-84-Final.html

Change-Id: I100ca755a4a994e0c2760d258e57a6074d5c60d7
---
M java/gradle/dependencies.gradle
1 file changed, 1 insertion(+), 1 deletion(-)



  git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/76/19176/1
-- 
To view, visit http://gerrit.cloudera.org:8080/19176
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newchange
Gerrit-Change-Id: I100ca755a4a994e0c2760d258e57a6074d5c60d7
Gerrit-Change-Number: 19176
Gerrit-PatchSet: 1
Gerrit-Owner: Alexey Serbin <al...@apache.org>

[kudu-CR] [java] update Netty from 4.1.73.Final to 4.1.84.Final

Posted by "Alexey Serbin (Code Review)" <ge...@cloudera.org>.
Alexey Serbin has removed a vote on this change.

Change subject: [java] update Netty from 4.1.73.Final to 4.1.84.Final
......................................................................


Removed Verified-1 by Kudu Jenkins (120)
-- 
To view, visit http://gerrit.cloudera.org:8080/19176
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: deleteVote
Gerrit-Change-Id: I100ca755a4a994e0c2760d258e57a6074d5c60d7
Gerrit-Change-Number: 19176
Gerrit-PatchSet: 2
Gerrit-Owner: Alexey Serbin <al...@apache.org>
Gerrit-Reviewer: Alexey Serbin <al...@apache.org>
Gerrit-Reviewer: Attila Bukor <ab...@apache.org>
Gerrit-Reviewer: Kudu Jenkins (120)

[kudu-CR] [java] update Netty from 4.1.73.Final to 4.1.84.Final

Posted by "Attila Bukor (Code Review)" <ge...@cloudera.org>.
Attila Bukor has posted comments on this change. ( http://gerrit.cloudera.org:8080/19176 )

Change subject: [java] update Netty from 4.1.73.Final to 4.1.84.Final
......................................................................


Patch Set 2: Code-Review+2


-- 
To view, visit http://gerrit.cloudera.org:8080/19176
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I100ca755a4a994e0c2760d258e57a6074d5c60d7
Gerrit-Change-Number: 19176
Gerrit-PatchSet: 2
Gerrit-Owner: Alexey Serbin <al...@apache.org>
Gerrit-Reviewer: Attila Bukor <ab...@apache.org>
Gerrit-Reviewer: Kudu Jenkins (120)
Gerrit-Comment-Date: Fri, 28 Oct 2022 17:23:32 +0000
Gerrit-HasComments: No

[kudu-CR] [java] update Netty from 4.1.73.Final to 4.1.84.Final

Posted by "Alexey Serbin (Code Review)" <ge...@cloudera.org>.
Hello Attila Bukor, Kudu Jenkins, 

I'd like you to reexamine a change. Please visit

    http://gerrit.cloudera.org:8080/19176

to look at the new patch set (#2).

Change subject: [java] update Netty from 4.1.73.Final to 4.1.84.Final
......................................................................

[java] update Netty from 4.1.73.Final to 4.1.84.Final

There was one CVE report on Netty since 4.1.73.Final [1] (affecting only
apps running Java version 6 or lower, though), so this patch updates
io.netty up to recently released 4.1.84.Final version [2] to address
that and pick up other bugfixes.

At least, this version update helps to keep security scanners happier.

[1] https://github.com/netty/netty/security/advisories/GHSA-269q-hmxg-m83q
[2] https://netty.io/news/2022/10/11/4-1-84-Final.html

Change-Id: I100ca755a4a994e0c2760d258e57a6074d5c60d7
---
M java/gradle/dependencies.gradle
1 file changed, 1 insertion(+), 1 deletion(-)


  git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/76/19176/2
-- 
To view, visit http://gerrit.cloudera.org:8080/19176
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I100ca755a4a994e0c2760d258e57a6074d5c60d7
Gerrit-Change-Number: 19176
Gerrit-PatchSet: 2
Gerrit-Owner: Alexey Serbin <al...@apache.org>
Gerrit-Reviewer: Attila Bukor <ab...@apache.org>
Gerrit-Reviewer: Kudu Jenkins (120)

[kudu-CR] [java] update Netty from 4.1.73.Final to 4.1.84.Final

Posted by "Alexey Serbin (Code Review)" <ge...@cloudera.org>.
Alexey Serbin has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/19176 )

Change subject: [java] update Netty from 4.1.73.Final to 4.1.84.Final
......................................................................

[java] update Netty from 4.1.73.Final to 4.1.84.Final

There was one CVE report on Netty since 4.1.73.Final [1] (affecting only
apps running Java version 6 or lower, though), so this patch updates
io.netty up to recently released 4.1.84.Final version [2] to address
that and pick up other bugfixes.

At least, this version update helps to keep security scanners happier.

[1] https://github.com/netty/netty/security/advisories/GHSA-269q-hmxg-m83q
[2] https://netty.io/news/2022/10/11/4-1-84-Final.html

Change-Id: I100ca755a4a994e0c2760d258e57a6074d5c60d7
Reviewed-on: http://gerrit.cloudera.org:8080/19176
Reviewed-by: Attila Bukor <ab...@apache.org>
Tested-by: Alexey Serbin <al...@apache.org>
---
M java/gradle/dependencies.gradle
1 file changed, 1 insertion(+), 1 deletion(-)

Approvals:
  Attila Bukor: Looks good to me, approved
  Alexey Serbin: Verified

-- 
To view, visit http://gerrit.cloudera.org:8080/19176
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: merged
Gerrit-Change-Id: I100ca755a4a994e0c2760d258e57a6074d5c60d7
Gerrit-Change-Number: 19176
Gerrit-PatchSet: 3
Gerrit-Owner: Alexey Serbin <al...@apache.org>
Gerrit-Reviewer: Alexey Serbin <al...@apache.org>
Gerrit-Reviewer: Attila Bukor <ab...@apache.org>
Gerrit-Reviewer: Kudu Jenkins (120)

[kudu-CR] [java] update Netty from 4.1.73.Final to 4.1.84.Final

Posted by "Alexey Serbin (Code Review)" <ge...@cloudera.org>.
Alexey Serbin has posted comments on this change. ( http://gerrit.cloudera.org:8080/19176 )

Change subject: [java] update Netty from 4.1.73.Final to 4.1.84.Final
......................................................................


Patch Set 2: Verified+1

unrelated test failure in RollingRestartArgs/RollingRestartITest.TestWorkloads/4 (ASAN)


-- 
To view, visit http://gerrit.cloudera.org:8080/19176
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I100ca755a4a994e0c2760d258e57a6074d5c60d7
Gerrit-Change-Number: 19176
Gerrit-PatchSet: 2
Gerrit-Owner: Alexey Serbin <al...@apache.org>
Gerrit-Reviewer: Alexey Serbin <al...@apache.org>
Gerrit-Reviewer: Attila Bukor <ab...@apache.org>
Gerrit-Reviewer: Kudu Jenkins (120)
Gerrit-Comment-Date: Fri, 28 Oct 2022 18:32:40 +0000
Gerrit-HasComments: No