This is an automated email from the ASF dual-hosted git repository.
wusheng pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/skywalking-java.git
The following commit(s) were added to refs/heads/main by this push:
new c94b409b28 fix CVE-2023-4586 (#632)
c94b409b28 is described below
commit c94b409b2819aec81b49b90d1974bfa54900faaa
Author: alan <252491...@qq.com>
AuthorDate: Tue Oct 24 19:28:02 2023 +0800
fix CVE-2023-4586 (#632)
Co-authored-by: za-liuyonghua <yonghua....@zatech.com>
---
CHANGES.md | 1 +
dist-material/LICENSE | 2 +-
pom.xml | 2 +-
3 files changed, 3 insertions(+), 2 deletions(-)
diff --git a/CHANGES.md b/CHANGES.md
index eab5a4afde..96a55eaaa1 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -16,6 +16,7 @@ Release Notes.
* To compatible upper and lower case Oracle TNS url parse.
* Fix config length limitation.
* Support collecting ZGC memory pool metrics. Require OAP 9.7.0 to support
these new metrics.
+* Upgrade netty-codec-http2 to 4.1.100.Final
#### Documentation
diff --git a/dist-material/LICENSE b/dist-material/LICENSE
index 27cdba1bdb..f8a5552565 100755
--- a/dist-material/LICENSE
+++ b/dist-material/LICENSE
@@ -221,7 +221,7 @@ The text of each license is the standard Apache 2.0 license.
Google: proto-google-common-protos 2.0.1:
https://github.com/googleapis/googleapis , Apache 2.0
Google: jsr305 3.0.2:
http://central.maven.org/maven2/com/google/code/findbugs/jsr305/3.0.0/jsr305-3.0.0.pom
, Apache 2.0
Google: guava 32.0.1: https://github.com/google/guava , Apache 2.0
- netty 4.1.94: https://github.com/netty/netty/blob/4.1/LICENSE.txt, Apache
2.0
+ netty 4.1.100: https://github.com/netty/netty/blob/4.1/LICENSE.txt, Apache
2.0
========================================================================
BSD licenses
diff --git a/pom.xml b/pom.xml
index 828041e9ee..3182775be8 100755
--- a/pom.xml
+++ b/pom.xml
@@ -88,7 +88,7 @@
<!-- core lib dependency -->
<bytebuddy.version>1.14.4</bytebuddy.version>
<grpc.version>1.50.0</grpc.version>
- <netty.version>4.1.94.Final</netty.version>
+ <netty.version>4.1.100.Final</netty.version>
<gson.version>2.8.9</gson.version>
<os-maven-plugin.version>1.6.2</os-maven-plugin.version>
<protobuf-maven-plugin.version>0.6.1</protobuf-maven-plugin.version>
