This is an automated email from the ASF dual-hosted git repository. lhotari pushed a commit to branch branch-4.0 in repository https://gitbox.apache.org/repos/asf/pulsar.git
commit 3f9f9c459d2b7cf7b586511eff0a2450ff2c4b33 Author: Lari Hotari <[email protected]> AuthorDate: Tue Dec 16 13:04:25 2025 +0200 [fix][sec] Upgrade Netty to 4.1.130.Final (#25078) (cherry picked from commit 3efc174f42de22523c51608858aef581b8743509) --- buildtools/pom.xml | 2 +- distribution/server/src/assemble/LICENSE.bin.txt | 40 ++++++++++++------------ distribution/shell/src/assemble/LICENSE.bin.txt | 38 +++++++++++----------- pom.xml | 2 +- 4 files changed, 41 insertions(+), 41 deletions(-) diff --git a/buildtools/pom.xml b/buildtools/pom.xml index 2cecc71e0f0..cf60c9a5813 100644 --- a/buildtools/pom.xml +++ b/buildtools/pom.xml @@ -55,7 +55,7 @@ <license-maven-plugin.version>4.1</license-maven-plugin.version> <puppycrawl.checkstyle.version>10.14.2</puppycrawl.checkstyle.version> <maven-checkstyle-plugin.version>3.1.2</maven-checkstyle-plugin.version> - <netty.version>4.1.128.Final</netty.version> + <netty.version>4.1.130.Final</netty.version> <guice.version>4.2.3</guice.version> <guava.version>32.1.2-jre</guava.version> <ant.version>1.10.12</ant.version> diff --git a/distribution/server/src/assemble/LICENSE.bin.txt b/distribution/server/src/assemble/LICENSE.bin.txt index 58590f1d142..501bef2f11f 100644 --- a/distribution/server/src/assemble/LICENSE.bin.txt +++ b/distribution/server/src/assemble/LICENSE.bin.txt @@ -293,26 +293,26 @@ The Apache Software License, Version 2.0 - org.apache.commons-commons-lang3-3.19.0.jar - org.apache.commons-commons-text-1.14.0.jar * Netty - - io.netty-netty-buffer-4.1.128.Final.jar - - io.netty-netty-codec-4.1.128.Final.jar - - io.netty-netty-codec-dns-4.1.128.Final.jar - - io.netty-netty-codec-http-4.1.128.Final.jar - - io.netty-netty-codec-http2-4.1.128.Final.jar - - io.netty-netty-codec-socks-4.1.128.Final.jar - - io.netty-netty-codec-haproxy-4.1.128.Final.jar - - io.netty-netty-common-4.1.128.Final.jar - - io.netty-netty-handler-4.1.128.Final.jar - - io.netty-netty-handler-proxy-4.1.128.Final.jar - - io.netty-netty-resolver-4.1.128.Final.jar - - io.netty-netty-resolver-dns-4.1.128.Final.jar - - io.netty-netty-resolver-dns-classes-macos-4.1.128.Final.jar - - io.netty-netty-resolver-dns-native-macos-4.1.128.Final-osx-aarch_64.jar - - io.netty-netty-resolver-dns-native-macos-4.1.128.Final-osx-x86_64.jar - - io.netty-netty-transport-4.1.128.Final.jar - - io.netty-netty-transport-classes-epoll-4.1.128.Final.jar - - io.netty-netty-transport-native-epoll-4.1.128.Final-linux-aarch_64.jar - - io.netty-netty-transport-native-epoll-4.1.128.Final-linux-x86_64.jar - - io.netty-netty-transport-native-unix-common-4.1.128.Final.jar + - io.netty-netty-buffer-4.1.130.Final.jar + - io.netty-netty-codec-4.1.130.Final.jar + - io.netty-netty-codec-dns-4.1.130.Final.jar + - io.netty-netty-codec-http-4.1.130.Final.jar + - io.netty-netty-codec-http2-4.1.130.Final.jar + - io.netty-netty-codec-socks-4.1.130.Final.jar + - io.netty-netty-codec-haproxy-4.1.130.Final.jar + - io.netty-netty-common-4.1.130.Final.jar + - io.netty-netty-handler-4.1.130.Final.jar + - io.netty-netty-handler-proxy-4.1.130.Final.jar + - io.netty-netty-resolver-4.1.130.Final.jar + - io.netty-netty-resolver-dns-4.1.130.Final.jar + - io.netty-netty-resolver-dns-classes-macos-4.1.130.Final.jar + - io.netty-netty-resolver-dns-native-macos-4.1.130.Final-osx-aarch_64.jar + - io.netty-netty-resolver-dns-native-macos-4.1.130.Final-osx-x86_64.jar + - io.netty-netty-transport-4.1.130.Final.jar + - io.netty-netty-transport-classes-epoll-4.1.130.Final.jar + - io.netty-netty-transport-native-epoll-4.1.130.Final-linux-aarch_64.jar + - io.netty-netty-transport-native-epoll-4.1.130.Final-linux-x86_64.jar + - io.netty-netty-transport-native-unix-common-4.1.130.Final.jar - io.netty-netty-tcnative-boringssl-static-2.0.74.Final.jar - io.netty-netty-tcnative-boringssl-static-2.0.74.Final-linux-aarch_64.jar - io.netty-netty-tcnative-boringssl-static-2.0.74.Final-linux-x86_64.jar diff --git a/distribution/shell/src/assemble/LICENSE.bin.txt b/distribution/shell/src/assemble/LICENSE.bin.txt index e12452ccb5d..443712e8a7d 100644 --- a/distribution/shell/src/assemble/LICENSE.bin.txt +++ b/distribution/shell/src/assemble/LICENSE.bin.txt @@ -347,22 +347,22 @@ The Apache Software License, Version 2.0 - commons-beanutils-1.11.0.jar - commons-configuration2-2.12.0.jar * Netty - - netty-buffer-4.1.128.Final.jar - - netty-codec-4.1.128.Final.jar - - netty-codec-dns-4.1.128.Final.jar - - netty-codec-http-4.1.128.Final.jar - - netty-codec-socks-4.1.128.Final.jar - - netty-codec-haproxy-4.1.128.Final.jar - - netty-common-4.1.128.Final.jar - - netty-handler-4.1.128.Final.jar - - netty-handler-proxy-4.1.128.Final.jar - - netty-resolver-4.1.128.Final.jar - - netty-resolver-dns-4.1.128.Final.jar - - netty-transport-4.1.128.Final.jar - - netty-transport-classes-epoll-4.1.128.Final.jar - - netty-transport-native-epoll-4.1.128.Final-linux-aarch_64.jar - - netty-transport-native-epoll-4.1.128.Final-linux-x86_64.jar - - netty-transport-native-unix-common-4.1.128.Final.jar + - netty-buffer-4.1.130.Final.jar + - netty-codec-4.1.130.Final.jar + - netty-codec-dns-4.1.130.Final.jar + - netty-codec-http-4.1.130.Final.jar + - netty-codec-socks-4.1.130.Final.jar + - netty-codec-haproxy-4.1.130.Final.jar + - netty-common-4.1.130.Final.jar + - netty-handler-4.1.130.Final.jar + - netty-handler-proxy-4.1.130.Final.jar + - netty-resolver-4.1.130.Final.jar + - netty-resolver-dns-4.1.130.Final.jar + - netty-transport-4.1.130.Final.jar + - netty-transport-classes-epoll-4.1.130.Final.jar + - netty-transport-native-epoll-4.1.130.Final-linux-aarch_64.jar + - netty-transport-native-epoll-4.1.130.Final-linux-x86_64.jar + - netty-transport-native-unix-common-4.1.130.Final.jar - netty-tcnative-boringssl-static-2.0.74.Final.jar - netty-tcnative-boringssl-static-2.0.74.Final-linux-aarch_64.jar - netty-tcnative-boringssl-static-2.0.74.Final-linux-x86_64.jar @@ -373,9 +373,9 @@ The Apache Software License, Version 2.0 - netty-incubator-transport-classes-io_uring-0.0.26.Final.jar - netty-incubator-transport-native-io_uring-0.0.26.Final-linux-aarch_64.jar - netty-incubator-transport-native-io_uring-0.0.26.Final-linux-x86_64.jar - - netty-resolver-dns-classes-macos-4.1.128.Final.jar - - netty-resolver-dns-native-macos-4.1.128.Final-osx-aarch_64.jar - - netty-resolver-dns-native-macos-4.1.128.Final-osx-x86_64.jar + - netty-resolver-dns-classes-macos-4.1.130.Final.jar + - netty-resolver-dns-native-macos-4.1.130.Final-osx-aarch_64.jar + - netty-resolver-dns-native-macos-4.1.130.Final-osx-x86_64.jar * Prometheus client - simpleclient-0.16.0.jar - simpleclient_log4j2-0.16.0.jar diff --git a/pom.xml b/pom.xml index 2b80eaf0b6b..5ffe045773f 100644 --- a/pom.xml +++ b/pom.xml @@ -184,7 +184,7 @@ flexible messaging model and an intuitive client API.</description> <snappy.version>1.1.10.5</snappy.version> <!-- ZooKeeper server --> <dropwizardmetrics.version>4.1.12.1</dropwizardmetrics.version> <!-- ZooKeeper server --> <curator.version>5.7.1</curator.version> - <netty.version>4.1.128.Final</netty.version> + <netty.version>4.1.130.Final</netty.version> <netty-iouring.version>0.0.26.Final</netty-iouring.version> <jetty.version>9.4.58.v20250814</jetty.version> <conscrypt.version>2.5.2</conscrypt.version>
