(iotdb) branch codex/upgrade-netty-cve-dev-1.3 created (now 74b4fdc589c)

[ha...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

HTHou pushed a change to branch codex/upgrade-netty-cve-dev-1.3
in repository https://gitbox.apache.org/repos/asf/iotdb.git


      at 74b4fdc589c Upgrade Netty for CVE fixes

This branch includes the following new commits:

     new 74b4fdc589c Upgrade Netty for CVE fixes

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.

(iotdb) 01/01: Upgrade Netty for CVE fixes

[ha...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

HTHou pushed a commit to branch codex/upgrade-netty-cve-dev-1.3
in repository https://gitbox.apache.org/repos/asf/iotdb.git

commit 74b4fdc589c207953113ad4730bf97c6509d9464
Author: HTHou <ha...@apache.org>
AuthorDate: Mon May 25 15:50:49 2026 +0800

    Upgrade Netty for CVE fixes
---
 LICENSE-binary | 22 +++++++++++-----------
 pom.xml        |  2 +-
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/LICENSE-binary b/LICENSE-binary
index f3fadab3af8..e64118ab439 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -241,17 +241,17 @@ io.dropwizard.metrics:metrics-core:4.2.19
 io.dropwizard.metrics:metrics-jvm:3.2.2
 com.librato.metrics:metrics-librato:5.1.0
 com.github.moquette-io.moquette:moquette-broker:0.18
-io.netty:netty-buffer:4.1.126.Final
-io.netty:netty-codec:4.1.126.Final
-io.netty:netty-codec-http:4.1.126.Final
-io.netty:netty-codec-mqtt:4.1.126.Final
-io.netty:netty-common:4.1.126.Final
-io.netty:netty-handler:4.1.126.Final
-io.netty:netty-resolver:4.1.126.Final
-io.netty:netty-transport:4.1.126.Final
-io.netty:netty-transport-native-epoll:4.1.126.Final:linux-aarch_64
-io.netty:netty-transport-native-epoll:4.1.126.Final:linux-x86_64
-io.netty:netty-transport-native-unix-common:4.1.126.Final
+io.netty:netty-buffer:4.1.134.Final
+io.netty:netty-codec:4.1.134.Final
+io.netty:netty-codec-http:4.1.134.Final
+io.netty:netty-codec-mqtt:4.1.134.Final
+io.netty:netty-common:4.1.134.Final
+io.netty:netty-handler:4.1.134.Final
+io.netty:netty-resolver:4.1.134.Final
+io.netty:netty-transport:4.1.134.Final
+io.netty:netty-transport-native-epoll:4.1.134.Final:linux-aarch_64
+io.netty:netty-transport-native-epoll:4.1.134.Final:linux-x86_64
+io.netty:netty-transport-native-unix-common:4.1.134.Final
 org.osgi:org.osgi.core:7.0.0
 org.osgi:osgi.cmpn:7.0.0
 org.ops4j.pax.jdbc:pax-jdbc-common:1.5.6
diff --git a/pom.xml b/pom.xml
index cbe907c71b9..a83a66e135c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -126,7 +126,7 @@
         <!-- This was the last version to support Java 8 -->
         <!--mockito.version>4.11.0</mockito.version-->
         <moquette.version>0.18.0</moquette.version>
-        <netty.version>4.1.126.Final</netty.version>
+        <netty.version>4.1.134.Final</netty.version>
         <!-- This was the last version to support Java 8 -->
         <openapi.generator.version>6.6.0</openapi.generator.version>
         <osgi.version>7.0.0</osgi.version>