Skip to content

Commit 5a3ef6e

Browse files
Update Netty to 4.1.131. Resolves CVE-2025-67735, CVE-2025-59419. (#6518) (#6521)
(cherry picked from commit 5ebad97) Signed-off-by: David Venable <dlv@amazon.com> Co-authored-by: David Venable <dlv@amazon.com>
1 parent b93361a commit 5a3ef6e

1 file changed

Lines changed: 4 additions & 4 deletions

File tree

build.gradle

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -237,11 +237,11 @@ subprojects {
237237
resolutionStrategy.eachDependency { def details ->
238238
if (details.requested.group == 'io.netty') {
239239
if (details.requested.name == 'netty') {
240-
details.useTarget group: 'io.netty', name: 'netty-all', version: '4.1.124.Final'
241-
details.because 'Fixes CVE-2025-24970, CVE-2022-41881, CVE-2021-21290 and CVE-2022-41915.'
240+
details.useTarget group: 'io.netty', name: 'netty-all', version: '4.1.131.Final'
241+
details.because 'Fixes CVE-2025-67735, CVE-2025-59419, CVE-2025-24970, CVE-2022-41881, CVE-2021-21290 and CVE-2022-41915.'
242242
} else if (!details.requested.name.startsWith('netty-tcnative')) {
243-
details.useVersion '4.1.125.Final'
244-
details.because 'Fixes CVE-2025-58057, CVE-2025-58056, CVE-2025-55163, CVE-2025-24970, CVE-2022-41881, CVE-2021-21290 and CVE-2022-41915.'
243+
details.useVersion '4.1.131.Final'
244+
details.because 'Fixes CVE-2025-67735, CVE-2025-59419, CVE-2025-58057, CVE-2025-58056, CVE-2025-55163, CVE-2025-24970, CVE-2022-41881, CVE-2021-21290 and CVE-2022-41915.'
245245
}
246246
} else if (details.requested.group == 'log4j' && details.requested.name == 'log4j') {
247247
details.useTarget group: 'org.apache.logging.log4j', name: 'log4j-1.2-api', version: '2.17.1'

0 commit comments

Comments
 (0)