You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@drill.apache.org by "pjfanning (via GitHub)" <gi...@apache.org> on 2024/04/20 00:40:10 UTC

[PR] [MINOR UPDATE} update to netty 4.1.109 due to CVE-2024-29025 (drill)

pjfanning opened a new pull request, #2904:
URL: https://github.com/apache/drill/pull/2904

   CVE-2024-29025
   
   Update to latest versions regardless
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@drill.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] [MINOR UPDATE] update to netty 4.1.109 due to CVE-2024-29025 (drill)

Posted by "jnturton (via GitHub)" <gi...@apache.org>.
jnturton merged PR #2904:
URL: https://github.com/apache/drill/pull/2904


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@drill.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] [MINOR UPDATE] update to netty 4.1.109 due to CVE-2024-29025 (drill)

Posted by "pjfanning (via GitHub)" <gi...@apache.org>.
pjfanning commented on PR #2904:
URL: https://github.com/apache/drill/pull/2904#issuecomment-2068123704

   @cgivre I fixed the compile issue and the tests seem to pass.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@drill.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] [MINOR UPDATE] update to netty 4.1.109 due to CVE-2024-29025 (drill)

Posted by "cgivre (via GitHub)" <gi...@apache.org>.
cgivre commented on PR #2904:
URL: https://github.com/apache/drill/pull/2904#issuecomment-2068106237

   @pjfanning Are the issues with this resolved?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@drill.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


Re: [PR] [MINOR UPDATE] update to netty 4.1.109 due to CVE-2024-29025 (drill)

Posted by "pjfanning (via GitHub)" <gi...@apache.org>.
pjfanning commented on PR #2904:
URL: https://github.com/apache/drill/pull/2904#issuecomment-2067479146

   This is causing a compile problem because Drill has some classes of its own that try to get inside the netty internals. The netty inner state has changed.
   
   ```
   Error:  /home/runner/work/drill/drill/exec/memory/base/src/main/java/io/netty/buffer/PooledByteBufAllocatorL.java:[112,38] error: cannot find symbol
     symbol:   variable chunkSize
     location: class PoolArena<ByteBuffer>
   Error:  /home/runner/work/drill/drill/exec/memory/base/src/main/java/io/netty/buffer/PooledByteBufAllocatorL.java:[169,41] error: cannot find symbol
     symbol:   variable chunkSize
     location: variable directArena of type PoolArena<ByteBuffer>
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@drill.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org