This is an automated email from the ASF dual-hosted git repository. pan3793 pushed a commit to branch branch-3.4 in repository https://gitbox.apache.org/repos/asf/hadoop.git
commit d3bf44d42d9c6f9d54bcd975c12c8d000a595fd6 Author: Edward Capriolo <[email protected]> AuthorDate: Wed Mar 11 06:59:32 2026 -0400 HADOOP-19788 update netty dependency to 4.1.130.Final (#8188) Addresses CVE-2025-67735 Contributed by Edward Capriolo --- LICENSE-binary | 62 +++++++++++++++++++++++++------------------------- hadoop-project/pom.xml | 2 +- 2 files changed, 32 insertions(+), 32 deletions(-) diff --git a/LICENSE-binary b/LICENSE-binary index cd07fcf8fa0..880867f9ba3 100644 --- a/LICENSE-binary +++ b/LICENSE-binary @@ -265,36 +265,36 @@ io.grpc:grpc-netty:1.69.0 io.grpc:grpc-protobuf:1.69.0 io.grpc:grpc-protobuf-lite:1.69.0 io.grpc:grpc-stub:1.69.0 -io.netty:netty-all:4.1.127.Final -io.netty:netty-buffer:4.1.127.Final -io.netty:netty-codec:4.1.127.Final -io.netty:netty-codec-dns:4.1.127.Final -io.netty:netty-codec-haproxy:4.1.127.Final -io.netty:netty-codec-http:4.1.127.Final -io.netty:netty-codec-http2:4.1.127.Final -io.netty:netty-codec-memcache:4.1.127.Final -io.netty:netty-codec-mqtt:4.1.127.Final -io.netty:netty-codec-redis:4.1.127.Final -io.netty:netty-codec-smtp:4.1.127.Final -io.netty:netty-codec-socks:4.1.127.Final -io.netty:netty-codec-stomp:4.1.127.Final -io.netty:netty-codec-xml:4.1.127.Final -io.netty:netty-common:4.1.127.Final -io.netty:netty-handler:4.1.127.Final -io.netty:netty-handler-proxy:4.1.127.Final -io.netty:netty-resolver:4.1.127.Final -io.netty:netty-resolver-dns:4.1.127.Final -io.netty:netty-transport:4.1.127.Final -io.netty:netty-transport-rxtx:4.1.127.Final -io.netty:netty-transport-sctp:4.1.127.Final -io.netty:netty-transport-udt:4.1.127.Final -io.netty:netty-transport-classes-epoll:4.1.127.Final -io.netty:netty-transport-native-unix-common:4.1.127.Final -io.netty:netty-transport-classes-kqueue:4.1.127.Final -io.netty:netty-resolver-dns-classes-macos:4.1.127.Final -io.netty:netty-transport-native-epoll:4.1.127.Final -io.netty:netty-transport-native-kqueue:4.1.127.Final -io.netty:netty-resolver-dns-native-macos:4.1.127.Final +io.netty:netty-all:4.1.130.Final +io.netty:netty-buffer:4.1.130.Final +io.netty:netty-codec:4.1.130.Final +io.netty:netty-codec-dns:4.1.130.Final +io.netty:netty-codec-haproxy:4.1.130.Final +io.netty:netty-codec-http:4.1.130.Final +io.netty:netty-codec-http2:4.1.130.Final +io.netty:netty-codec-memcache:4.1.130.Final +io.netty:netty-codec-mqtt:4.1.130.Final +io.netty:netty-codec-redis:4.1.130.Final +io.netty:netty-codec-smtp:4.1.130.Final +io.netty:netty-codec-socks:4.1.130.Final +io.netty:netty-codec-stomp:4.1.130.Final +io.netty:netty-codec-xml:4.1.130.Final +io.netty:netty-common:4.1.130.Final +io.netty:netty-handler:4.1.130.Final +io.netty:netty-handler-proxy:4.1.130.Final +io.netty:netty-resolver:4.1.130.Final +io.netty:netty-resolver-dns:4.1.130.Final +io.netty:netty-transport:4.1.130.Final +io.netty:netty-transport-rxtx:4.1.130.Final +io.netty:netty-transport-sctp:4.1.130.Final +io.netty:netty-transport-udt:4.1.130.Final +io.netty:netty-transport-classes-epoll:4.1.130.Final +io.netty:netty-transport-native-unix-common:4.1.130.Final +io.netty:netty-transport-classes-kqueue:4.1.130.Final +io.netty:netty-resolver-dns-classes-macos:4.1.130.Final +io.netty:netty-transport-native-epoll:4.1.130.Final +io.netty:netty-transport-native-kqueue:4.1.130.Final +io.netty:netty-resolver-dns-native-macos:4.1.130.Final io.opencensus:opencensus-api:0.12.3 io.opencensus:opencensus-contrib-grpc-metrics:0.12.3 io.opentracing:opentracing-api:0.33.0.jar @@ -553,4 +553,4 @@ aopalliance:aopalliance:1.0 Dom4J license ------------- -org.dom4j:dom4j:2.1.4.jar \ No newline at end of file +org.dom4j:dom4j:2.1.4.jar diff --git a/hadoop-project/pom.xml b/hadoop-project/pom.xml index 0629a25bb12..5bc0244264a 100644 --- a/hadoop-project/pom.xml +++ b/hadoop-project/pom.xml @@ -144,7 +144,7 @@ <jna.version>5.2.0</jna.version> <gson.version>2.9.0</gson.version> <metrics.version>3.2.4</metrics.version> - <netty4.version>4.1.127.Final</netty4.version> + <netty4.version>4.1.130.Final</netty4.version> <snappy-java.version>1.1.10.4</snappy-java.version> <lz4-java.version>1.10.4</lz4-java.version> --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
