[PR] Upgrade to Netty 4.1.115.Final to address CVE-2024-47535 [bookkeeper]

["lhotari (via GitHub)" <gi...@apache.org>]

lhotari opened a new pull request, #4524:
URL: https://github.com/apache/bookkeeper/pull/4524

   ### Motivation
   
   Upgrade to Netty 4.1.115.Final to address CVE-2024-47535. This DoS vulnerability doesn't practically apply to BookKeeper since the vulnerability requires write access to the filesystem where the application using Netty is running. However, it's always useful to address CVEs by upgrading to a version that doesn't contain known vulnerabilities.
   
   ### Changes
   
   - Upgrade Netty to 4.1.115.Final
     - netty-bom in 4.1.115.Final upgrades Netty tcnative to 2.0.69.Final
   
   - Release notes:
     - [4.1.115.Final](https://netty.io/news/2024/11/12/4-1-115-Final.html)
     - [4.1.114.Final](https://netty.io/news/2024/10/01/4-1-114-Final.html)
     
   - Netty tcnative [changes in 2.0.69.Final since 2.0.66.Final](https://github.com/netty/netty-tcnative/compare/netty-tcnative-parent-2.0.66.Final...netty-tcnative-parent-2.0.69.Final) 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@bookkeeper.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] Upgrade to Netty 4.1.115.Final to address CVE-2024-47535 [bookkeeper]

["shoothzj (via GitHub)" <gi...@apache.org>]

shoothzj merged PR #4524:
URL: https://github.com/apache/bookkeeper/pull/4524


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@bookkeeper.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org