Merge pull request #5848 from harshit-gangal/netty-bump

Java Netty Version bump to Fix Vulnerability
vitessio · Feb 24, 2020 · a9d7156 · a9d7156
2 parents 89fb748 + 154b86e
commit a9d7156
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/java/pom.xml b/java/pom.xml
@@ -70,8 +70,8 @@
     <grpc.version>1.16.0</grpc.version>
     <!-- NOTE Netty handler and boring SSL must be kept compatible with grpc
       https://github.com/grpc/grpc-java/blob/master/SECURITY.md#netty -->
-    <netty.handler.version>4.1.30.Final</netty.handler.version>
-    <tcnative.boring.ssl.version>2.0.17.Final</tcnative.boring.ssl.version>
+    <netty.handler.version>4.1.45.Final</netty.handler.version>
+    <tcnative.boring.ssl.version>2.0.28.Final</tcnative.boring.ssl.version>
 
     <protobuf.java.version>3.6.1</protobuf.java.version>
     <protobuf.protoc.version>3.6.1</protobuf.protoc.version>