From 52d94b09a771aaba74be0f7e1dbde25774058007 Mon Sep 17 00:00:00 2001
From: Tejaswini Bandlamudi <96047043+tejaswini-imply@users.noreply.github.com>
Date: Wed, 11 Oct 2023 18:16:28 +0530
Subject: [PATCH] update jetty & netty4 dependencies (#15129)

Update jetty dependencies version to 9.4.53.v20231009
Update netty4 dependencies version to 4.1.100.Final to resolve CVE-2023-4586 (Netty-handler does not validate host names by default)
---
 licenses.yaml | 4 ++--
 pom.xml       | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/licenses.yaml b/licenses.yaml
index 3b42871419a..f2c01acaffd 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -1289,7 +1289,7 @@ name: Netty
 license_category: binary
 module: java-core
 license_name: Apache License version 2.0
-version: 4.1.94.Final
+version: 4.1.100.Final
 libraries:
   - io.netty: netty-buffer
   - io.netty: netty-codec
@@ -2060,7 +2060,7 @@ name: Jetty
 license_category: binary
 module: java-core
 license_name: Apache License version 2.0
-version: 9.4.51.v20230217
+version: 9.4.53.v20231009
 libraries:
   - org.eclipse.jetty: jetty-client
   - org.eclipse.jetty: jetty-continuation
diff --git a/pom.xml b/pom.xml
index bbfd3517c4c..945cc9d56d9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -95,7 +95,7 @@
         <guava.version>31.1-jre</guava.version>
         <guice.version>4.1.0</guice.version>
         <hamcrest.version>1.3</hamcrest.version>
-        <jetty.version>9.4.51.v20230217</jetty.version>
+        <jetty.version>9.4.53.v20231009</jetty.version>
         <jersey.version>1.19.4</jersey.version>
         <jackson.version>2.12.7</jackson.version>
         <codehaus.jackson.version>1.9.13</codehaus.jackson.version>
@@ -103,7 +103,7 @@
         <mysql.version>5.1.49</mysql.version>
         <mariadb.version>2.7.3</mariadb.version>
         <netty3.version>3.10.6.Final</netty3.version>
-        <netty4.version>4.1.94.Final</netty4.version>
+        <netty4.version>4.1.100.Final</netty4.version>
         <postgresql.version>42.6.0</postgresql.version>
         <protobuf.version>3.24.0</protobuf.version>
         <resilience4j.version>1.3.1</resilience4j.version>