big-data/hadoop
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

HADOOP-18933. upgrade to netty 4.1.100 due to CVE (#6173)

Browse Source 
Mitigates Netty security advisory GHSA-xpw8-rcwv-8f8p
"HTTP/2 Rapid Reset Attack - DDoS vector in the HTTP/2 protocol due RST frames"

Contributed by PJ Fanning
This commit is contained in:
PJ Fanning 2023-10-25 14:06:13 +01:00 committed by GitHub
parent f85ac5b60d
commit bbf905dc99
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 31 additions and 31 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

60
LICENSE-binary
View File

@ -257,36 +257,36 @@ io.grpc:grpc-netty:1.26.0
io.grpc:grpc-protobuf:1.26.0 io.grpc:grpc-protobuf:1.26.0
io.grpc:grpc-protobuf-lite:1.26.0 io.grpc:grpc-protobuf-lite:1.26.0
io.grpc:grpc-stub:1.26.0 io.grpc:grpc-stub:1.26.0
io.netty:netty-all:4.1.94.Final io.netty:netty-all:4.1.100.Final
io.netty:netty-buffer:4.1.94.Final io.netty:netty-buffer:4.1.100.Final
io.netty:netty-codec:4.1.94.Final io.netty:netty-codec:4.1.100.Final
io.netty:netty-codec-dns:4.1.94.Final io.netty:netty-codec-dns:4.1.100.Final
io.netty:netty-codec-haproxy:4.1.94.Final io.netty:netty-codec-haproxy:4.1.100.Final
io.netty:netty-codec-http:4.1.94.Final io.netty:netty-codec-http:4.1.100.Final
io.netty:netty-codec-http2:4.1.94.Final io.netty:netty-codec-http2:4.1.100.Final
io.netty:netty-codec-memcache:4.1.94.Final io.netty:netty-codec-memcache:4.1.100.Final
io.netty:netty-codec-mqtt:4.1.94.Final io.netty:netty-codec-mqtt:4.1.100.Final
io.netty:netty-codec-redis:4.1.94.Final io.netty:netty-codec-redis:4.1.100.Final
io.netty:netty-codec-smtp:4.1.94.Final io.netty:netty-codec-smtp:4.1.100.Final
io.netty:netty-codec-socks:4.1.94.Final io.netty:netty-codec-socks:4.1.100.Final
io.netty:netty-codec-stomp:4.1.94.Final io.netty:netty-codec-stomp:4.1.100.Final
io.netty:netty-codec-xml:4.1.94.Final io.netty:netty-codec-xml:4.1.100.Final
io.netty:netty-common:4.1.94.Final io.netty:netty-common:4.1.100.Final
io.netty:netty-handler:4.1.94.Final io.netty:netty-handler:4.1.100.Final
io.netty:netty-handler-proxy:4.1.94.Final io.netty:netty-handler-proxy:4.1.100.Final
io.netty:netty-resolver:4.1.94.Final io.netty:netty-resolver:4.1.100.Final
io.netty:netty-resolver-dns:4.1.94.Final io.netty:netty-resolver-dns:4.1.100.Final
io.netty:netty-transport:4.1.94.Final io.netty:netty-transport:4.1.100.Final
io.netty:netty-transport-rxtx:4.1.94.Final io.netty:netty-transport-rxtx:4.1.100.Final
io.netty:netty-transport-sctp:4.1.94.Final io.netty:netty-transport-sctp:4.1.100.Final
io.netty:netty-transport-udt:4.1.94.Final io.netty:netty-transport-udt:4.1.100.Final
io.netty:netty-transport-classes-epoll:4.1.94.Final io.netty:netty-transport-classes-epoll:4.1.100.Final
io.netty:netty-transport-native-unix-common:4.1.94.Final io.netty:netty-transport-native-unix-common:4.1.100.Final
io.netty:netty-transport-classes-kqueue:4.1.94.Final io.netty:netty-transport-classes-kqueue:4.1.100.Final
io.netty:netty-resolver-dns-classes-macos:4.1.94.Final io.netty:netty-resolver-dns-classes-macos:4.1.100.Final
io.netty:netty-transport-native-epoll:4.1.94.Final io.netty:netty-transport-native-epoll:4.1.100.Final
io.netty:netty-transport-native-kqueue:4.1.94.Final io.netty:netty-transport-native-kqueue:4.1.100.Final
io.netty:netty-resolver-dns-native-macos:4.1.94.Final io.netty:netty-resolver-dns-native-macos:4.1.100.Final
io.opencensus:opencensus-api:0.12.3 io.opencensus:opencensus-api:0.12.3
io.opencensus:opencensus-contrib-grpc-metrics:0.12.3 io.opencensus:opencensus-contrib-grpc-metrics:0.12.3
io.reactivex:rxjava:1.3.8 io.reactivex:rxjava:1.3.8

2
hadoop-project/pom.xml
View File

@ -143,7 +143,7 @@
<jna.version>5.2.0</jna.version> <jna.version>5.2.0</jna.version>
<gson.version>2.9.0</gson.version> <gson.version>2.9.0</gson.version>
<metrics.version>3.2.4</metrics.version> <metrics.version>3.2.4</metrics.version>
<netty4.version>4.1.94.Final</netty4.version> <netty4.version>4.1.100.Final</netty4.version>
<snappy-java.version>1.1.10.4</snappy-java.version> <snappy-java.version>1.1.10.4</snappy-java.version>
<lz4-java.version>1.7.1</lz4-java.version> <lz4-java.version>1.7.1</lz4-java.version>