[jira] [Updated] (STORM-4078) Uplift Netty version to 4.1.112

["ASF GitHub Bot (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/STORM-4078?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

ASF GitHub Bot updated STORM-4078:
----------------------------------
    Labels: dependency-upgrade pull-request-available  (was: dependency-upgrade)

> Uplift Netty version to 4.1.112
> -------------------------------
>
>                 Key: STORM-4078
>                 URL: https://issues.apache.org/jira/browse/STORM-4078
>             Project: Apache Storm
>          Issue Type: Dependency upgrade
>          Components: storm-client, storm-server
>            Reporter: Andrew Olson
>            Priority: Major
>              Labels: dependency-upgrade, pull-request-available
>             Fix For: 2.7.0
>
>
> Netty version {{4.1.107.Final}} is shaded into {{storm-shaded-deps}} (with classes relocated to {{{}org/apache/storm/shade/io/netty{}}}). It now needs to be uplifted to remediate [CVE-2024-29025|https://nvd.nist.gov/vuln/detail/CVE-2024-29025]. The latest available {{4.x}} release for Netty is {{{}4.1.112.Final{}}}.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)