Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use Netty 4.1.68 which fixes CVE-2021-37136 and CVE-2021-37137 #661

Merged
merged 1 commit into from
Nov 29, 2021

Conversation

dlvenable
Copy link
Member

@dlvenable dlvenable commented Nov 29, 2021

Description

Fixes two CVEs which are in the currently used version of Netty.

See https://netty.io/news/2021/09/09/4-1-68-Final.html

Issues Resolved

N/A

Check List

  • New functionality includes testing.
    • All tests pass
  • New functionality has been documented.
    • New functionality has javadoc added
  • Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

@dlvenable dlvenable requested a review from a team as a code owner November 29, 2021 15:36
@codecov-commenter
Copy link

Codecov Report

❗ No coverage uploaded for pull request base (1.2@3eb5f2e). Click here to learn what that means.
The diff coverage is n/a.

Impacted file tree graph

@@          Coverage Diff           @@
##             1.2     #661   +/-   ##
======================================
  Coverage       ?   91.38%           
  Complexity     ?      583           
======================================
  Files          ?       74           
  Lines          ?     1788           
  Branches       ?      148           
======================================
  Hits           ?     1634           
  Misses         ?      116           
  Partials       ?       38           

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 3eb5f2e...d1b458a. Read the comment docs.

@dlvenable dlvenable merged commit e700ffe into opensearch-project:1.2 Nov 29, 2021
@dlvenable dlvenable deleted the netty-cve-update branch November 29, 2021 17:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants