You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by sh...@apache.org on 2022/06/09 01:08:50 UTC
[pulsar] branch master updated: Upgrade Netty Reactive Streams to 2.0.6 (#15990)
This is an automated email from the ASF dual-hosted git repository.
shoothzj pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/pulsar.git
The following commit(s) were added to refs/heads/master by this push:
new 3d7634a06ff Upgrade Netty Reactive Streams to 2.0.6 (#15990)
3d7634a06ff is described below
commit 3d7634a06ff48f070a0bfce3925ccd30f1981cf6
Author: Matteo Merli <mm...@apache.org>
AuthorDate: Wed Jun 8 18:08:44 2022 -0700
Upgrade Netty Reactive Streams to 2.0.6 (#15990)
### Motivation
https://nvd.nist.gov/vuln/detail/CVE-2019-20444#range-6908693
Upgrade from 2.0.4 to 2.0.6
---
distribution/server/src/assemble/LICENSE.bin.txt | 2 +-
pom.xml | 7 +++++++
pulsar-sql/presto-distribution/LICENSE | 2 +-
3 files changed, 9 insertions(+), 2 deletions(-)
diff --git a/distribution/server/src/assemble/LICENSE.bin.txt b/distribution/server/src/assemble/LICENSE.bin.txt
index 349341715d5..b6103f484db 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -332,7 +332,7 @@ The Apache Software License, Version 2.0
- com.google.guava-failureaccess-1.0.1.jar
- com.google.guava-listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar
* J2ObjC Annotations -- com.google.j2objc-j2objc-annotations-1.3.jar
- * Netty Reactive Streams -- com.typesafe.netty-netty-reactive-streams-2.0.4.jar
+ * Netty Reactive Streams -- com.typesafe.netty-netty-reactive-streams-2.0.6.jar
* Swagger
- io.swagger-swagger-annotations-1.6.2.jar
- io.swagger-swagger-core-1.6.2.jar
diff --git a/pom.xml b/pom.xml
index 2176fcf2f74..374be441097 100644
--- a/pom.xml
+++ b/pom.xml
@@ -225,6 +225,7 @@ flexible messaging model and an intuitive client API.</description>
<seancfoley.ipaddress.version>5.3.3</seancfoley.ipaddress.version>
<disruptor.version>3.4.3</disruptor.version>
<zstd-jni.version>1.5.2-3</zstd-jni.version>
+ <netty-reactive-streams.version>2.0.6</netty-reactive-streams.version>
<!-- test dependencies -->
<cassandra.version>3.6.0</cassandra.version>
@@ -1290,6 +1291,12 @@ flexible messaging model and an intuitive client API.</description>
<artifactId>zstd-jni</artifactId>
<version>${zstd-jni.version}</version>
</dependency>
+
+ <dependency>
+ <groupId>com.typesafe.netty</groupId>
+ <artifactId>netty-reactive-streams</artifactId>
+ <version>${netty-reactive-streams.version}</version>
+ </dependency>
</dependencies>
</dependencyManagement>
diff --git a/pulsar-sql/presto-distribution/LICENSE b/pulsar-sql/presto-distribution/LICENSE
index 1408c35dbe9..8126989428e 100644
--- a/pulsar-sql/presto-distribution/LICENSE
+++ b/pulsar-sql/presto-distribution/LICENSE
@@ -241,7 +241,7 @@ The Apache Software License, Version 2.0
- netty-handler-proxy-4.1.77.Final.jar
- netty-common-4.1.77.Final.jar
- netty-handler-4.1.77.Final.jar
- - netty-reactive-streams-2.0.4.jar
+ - netty-reactive-streams-2.0.6.jar
- netty-resolver-4.1.77.Final.jar
- netty-resolver-dns-4.1.77.Final.jar
- netty-tcnative-boringssl-static-2.0.52.Final.jar