You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by "Bret McGuire (Jira)" <ji...@apache.org> on 2026/09/04 20:07:00 UTC
[jira] [Updated] (CASSJAVA-137) Bump Netty to (at least) 4.1.137
[ https://issues.apache.org/jira/browse/CASSJAVA-137?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bret McGuire updated CASSJAVA-137:
----------------------------------
Summary: Bump Netty to (at least) 4.1.137 (was: Bump Netty to (at least) 4.1.137.)
> Bump Netty to (at least) 4.1.137
> --------------------------------
>
> Key: CASSJAVA-137
> URL: https://issues.apache.org/jira/browse/CASSJAVA-137
> Project: Apache Cassandra Java driver
> Issue Type: Improvement
> Components: Core
> Reporter: Bret McGuire
> Priority: Normal
> Fix For: 5.0.0
>
>
> Our last bump was to 4.1.130; that's been merged on 4.x and is [in-process on 3.x|https://github.com/apache/cassandra-java-driver/pull/2089] as I write this. Newer versions of Netty have included a hefty number of CVE fixes, most prominently [4.1.133|https://netty.io/news/2026/05/04/4-1-133-Final.html], [4.1.135|https://netty.io/news/2026/06/02/4-1-135-Final.html] and [4.1.136|https://netty.io/news/2026/07/09/4-1-136-Final.html].
> Any such change should almost certainly go into 3.x, 4.x and trunk.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org