Lativado opened a new pull request, #3685:
URL: https://github.com/apache/storm/pull/3685

   ## What is the purpose of the change
   
   We have detected a CVE 
([CVE-2024-29025](https://nvd.nist.gov/vuln/detail/CVE-2024-29025)) in our code 
and have tracked it down to the version of netty included with 
storm-shaded-deps. This will need to be fixed in a storm 2.6.4 release so that 
we can resolve this CVE by uplifting to that version.
   
   ## How was the change tested
   
   Small dependency bump. No tests performed.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@storm.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to