Skip to content

Commit

Permalink
HCD-96: Upgrade Netty to 4.1.118.Final
Browse files Browse the repository at this point in the history
This patch updates Netty to address CVE-2025-24970.
It also adds the Netty native epoll dependency
that was missing when Netty was upgraded from
4.1.58 to 4.1.117. Since 4.1.58, the native
libraries are now separated out into new dependencies
and must be explicitly added for them to be bundled
into the tarball.
  • Loading branch information
emerkle826 committed Feb 25, 2025
1 parent 71ba631 commit 5d97037
Showing 1 changed file with 6 additions and 2 deletions.
8 changes: 6 additions & 2 deletions build.xml
Original file line number Diff line number Diff line change
Expand Up @@ -666,8 +666,10 @@
<dependency groupId="io.airlift" artifactId="airline" version="0.8">
<exclusion groupId="com.google.code.findbugs" artifactId="jsr305" />
</dependency>
<dependency groupId="io.netty" artifactId="netty-bom" version="4.1.117.Final" type="pom" scope="provided"/>
<dependency groupId="io.netty" artifactId="netty-all" version="4.1.117.Final" />
<dependency groupId="io.netty" artifactId="netty-bom" version="4.1.118.Final" type="pom" scope="provided"/>
<dependency groupId="io.netty" artifactId="netty-all" version="4.1.118.Final" />
<dependency groupId="io.netty" artifactId="netty-transport-native-epoll" version="4.1.118.Final"/>
<dependency groupId="io.netty" artifactId="netty-transport-native-epoll" version="4.1.118.Final" classifier="linux-x86_64"/>
<dependency groupId="io.netty" artifactId="netty-tcnative-boringssl-static" version="2.0.69.Final"/>
<dependency groupId="net.openhft" artifactId="chronicle-queue" version="${chronicle-queue.version}">
<exclusion groupId="com.sun" artifactId="tools" />
Expand Down Expand Up @@ -905,6 +907,8 @@
<dependency groupId="de.huxhorn.sulky" artifactId="de.huxhorn.sulky.ulid"/>
<dependency groupId="io.netty" artifactId="netty-bom" type="pom" />
<dependency groupId="io.netty" artifactId="netty-all"/>
<dependency groupId="io.netty" artifactId="netty-transport-native-epoll"/>
<dependency groupId="io.netty" artifactId="netty-transport-native-epoll" classifier="linux-x86_64"/>
<dependency groupId="net.openhft" artifactId="chronicle-queue"/>
<dependency groupId="net.openhft" artifactId="chronicle-core"/>
<dependency groupId="net.openhft" artifactId="chronicle-bytes"/>
Expand Down

0 comments on commit 5d97037

Please sign in to comment.