Skip to content

Commit 2acf78b

Browse files
authored
fix: Upgrade minor netty version (transitive dependency patch) (#1155)
1 parent 3eb70a1 commit 2acf78b

1 file changed

Lines changed: 61 additions & 0 deletions

File tree

  • cloudplatform/connectivity-ztis

cloudplatform/connectivity-ztis/pom.xml

Lines changed: 61 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28,6 +28,9 @@
2828
<organizationUrl>https://www.sap.com</organizationUrl>
2929
</developer>
3030
</developers>
31+
<properties>
32+
<netty.version>4.1.132.Final</netty.version>
33+
</properties>
3134
<dependencyManagement>
3235
<dependencies>
3336
<!-- resolve inconsistent versions coming from spiffe -> io.grpc -->
@@ -38,6 +41,64 @@
3841
<type>pom</type>
3942
<scope>import</scope>
4043
</dependency>
44+
45+
<!-- Enforce minor netty dependency upgrade for grpc-netty -->
46+
<!-- Remove if CVE-2026-33870 and CVE-2026-33871 are no longer affected. -->
47+
<dependency>
48+
<groupId>io.netty</groupId>
49+
<artifactId>netty-handler</artifactId>
50+
<version>${netty.version}</version>
51+
</dependency>
52+
<dependency>
53+
<groupId>io.netty</groupId>
54+
<artifactId>netty-handler-proxy</artifactId>
55+
<version>${netty.version}</version>
56+
</dependency>
57+
<dependency>
58+
<groupId>io.netty</groupId>
59+
<artifactId>netty-codec</artifactId>
60+
<version>${netty.version}</version>
61+
</dependency>
62+
<dependency>
63+
<groupId>io.netty</groupId>
64+
<artifactId>netty-common</artifactId>
65+
<version>${netty.version}</version>
66+
</dependency>
67+
<dependency>
68+
<groupId>io.netty</groupId>
69+
<artifactId>netty-transport</artifactId>
70+
<version>${netty.version}</version>
71+
</dependency>
72+
<dependency>
73+
<groupId>io.netty</groupId>
74+
<artifactId>netty-codec-http</artifactId>
75+
<version>${netty.version}</version>
76+
</dependency>
77+
<dependency>
78+
<groupId>io.netty</groupId>
79+
<artifactId>netty-codec-socks</artifactId>
80+
<version>${netty.version}</version>
81+
</dependency>
82+
<dependency>
83+
<groupId>io.netty</groupId>
84+
<artifactId>netty-buffer</artifactId>
85+
<version>${netty.version}</version>
86+
</dependency>
87+
<dependency>
88+
<groupId>io.netty</groupId>
89+
<artifactId>netty-resolver</artifactId>
90+
<version>${netty.version}</version>
91+
</dependency>
92+
<dependency>
93+
<groupId>io.netty</groupId>
94+
<artifactId>netty-codec-http2</artifactId>
95+
<version>${netty.version}</version>
96+
</dependency>
97+
<dependency>
98+
<groupId>io.netty</groupId>
99+
<artifactId>netty-transport-native-unix-common</artifactId>
100+
<version>${netty.version}</version>
101+
</dependency>
41102
</dependencies>
42103
</dependencyManagement>
43104
<dependencies>

0 commit comments

Comments
 (0)