You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@storm.apache.org by "Andrew Olson (Jira)" <ji...@apache.org> on 2024/08/23 17:23:00 UTC

[jira] [Created] (STORM-4078) Uplift Netty version to 4.1.112

Andrew Olson created STORM-4078:
-----------------------------------

             Summary: Uplift Netty version to 4.1.112
                 Key: STORM-4078
                 URL: https://issues.apache.org/jira/browse/STORM-4078
             Project: Apache Storm
          Issue Type: Dependency upgrade
          Components: storm-client, storm-server
            Reporter: Andrew Olson
             Fix For: 2.7.0


Netty version {{4.1.107.Final}} is shaded into {{storm-shaded-deps}} (with classes relocated to {{{}org/apache/storm/shade/io/netty{}}}). It now needs to be uplifted to remediate [CVE-2024-29025|https://nvd.nist.gov/vuln/detail/CVE-2024-29025]. The latest available {{4.x}} release for Netty is {{{}4.1.112.Final{}}}.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)