You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by mm...@apache.org on 2022/06/09 18:15:22 UTC
[pulsar] 02/03: Upgrade Netty Reactive Streams to 2.0.6 (#15990)
This is an automated email from the ASF dual-hosted git repository.
mmerli pushed a commit to branch branch-2.10
in repository https://gitbox.apache.org/repos/asf/pulsar.git
commit 4fca9d0ba308abe27f71e4341402203102c913b4
Author: Matteo Merli <mm...@apache.org>
AuthorDate: Wed Jun 8 18:08:44 2022 -0700
Upgrade Netty Reactive Streams to 2.0.6 (#15990)
https://nvd.nist.gov/vuln/detail/CVE-2019-20444#range-6908693
Upgrade from 2.0.4 to 2.0.6
---
distribution/server/src/assemble/LICENSE.bin.txt | 2 +-
pom.xml | 7 ++++++-
pulsar-sql/presto-distribution/LICENSE | 2 +-
3 files changed, 8 insertions(+), 3 deletions(-)
diff --git a/distribution/server/src/assemble/LICENSE.bin.txt b/distribution/server/src/assemble/LICENSE.bin.txt
index 84b6e494e10..e9cf861f1c7 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -332,7 +332,7 @@ The Apache Software License, Version 2.0
- com.google.guava-failureaccess-1.0.1.jar
- com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar
* J2ObjC Annotations -- com.google.j2objc-j2objc-annotations-1.3.jar
- * Netty Reactive Streams -- com.typesafe.netty-netty-reactive-streams-2.0.4.jar
+ * Netty Reactive Streams -- com.typesafe.netty-netty-reactive-streams-2.0.6.jar
* Swagger
- io.swagger-swagger-annotations-1.6.2.jar
- io.swagger-swagger-core-1.6.2.jar
diff --git a/pom.xml b/pom.xml
index 25dc660517f..912d59e6521 100644
--- a/pom.xml
+++ b/pom.xml
@@ -210,6 +210,7 @@ flexible messaging model and an intuitive client API.</description>
<snakeyaml.version>1.30</snakeyaml.version>
<ant.version>1.10.12</ant.version>
<seancfoley.ipaddress.version>5.3.3</seancfoley.ipaddress.version>
+ <netty-reactive-streams.version>2.0.6</netty-reactive-streams.version>
<!-- test dependencies -->
<cassandra.version>3.6.0</cassandra.version>
@@ -1258,7 +1259,11 @@ flexible messaging model and an intuitive client API.</description>
<version>${kotlin-stdlib.version}</version>
</dependency>
-
+ <dependency>
+ <groupId>com.typesafe.netty</groupId>
+ <artifactId>netty-reactive-streams</artifactId>
+ <version>${netty-reactive-streams.version}</version>
+ </dependency>
</dependencies>
</dependencyManagement>
diff --git a/pulsar-sql/presto-distribution/LICENSE b/pulsar-sql/presto-distribution/LICENSE
index 82617157da0..44198afea07 100644
--- a/pulsar-sql/presto-distribution/LICENSE
+++ b/pulsar-sql/presto-distribution/LICENSE
@@ -241,7 +241,7 @@ The Apache Software License, Version 2.0
- netty-handler-proxy-4.1.77.Final.jar
- netty-common-4.1.77.Final.jar
- netty-handler-4.1.77.Final.jar
- - netty-reactive-streams-2.0.4.jar
+ - netty-reactive-streams-2.0.6.jar
- netty-resolver-4.1.77.Final.jar
- netty-resolver-dns-4.1.77.Final.jar
- netty-tcnative-boringssl-static-2.0.52.Final.jar