Upgrade netty 4 to fix CVE-2020-11612 (#9651)

This commit is contained in:
Chi Cao Minh 2020-04-09 13:26:14 -07:00 committed by GitHub
parent 84c1c2505d
commit eb45981b60
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions

View File

@ -917,7 +917,7 @@ name: Netty
license_category: binary
module: java-core
license_name: Apache License version 2.0
version: 4.1.45.Final
version: 4.1.48.Final
libraries:
- io.netty: netty-buffer
- io.netty: netty-codec

View File

@ -99,7 +99,7 @@
<netty3.version>3.10.6.Final</netty3.version>
<resilience4j.version>1.3.1</resilience4j.version>
<!-- Spark updated in https://github.com/apache/spark/pull/19884 -->
<netty4.version>4.1.45.Final</netty4.version>
<netty4.version>4.1.48.Final</netty4.version>
<node.version>v10.14.2</node.version>
<npm.version>6.5.0</npm.version>
<postgresql.version>42.2.8</postgresql.version>