#79: Upgrade netty dependency

exasol · Nov 18, 2024 · 06e7a47 · 06e7a47
1 parent 39a0ad7
commit 06e7a47
Show file tree

Hide file tree

Showing 4 changed files with 82 additions and 64 deletions.
diff --git a/.vscode/settings.json b/.vscode/settings.json
@@ -20,5 +20,5 @@
   },
   "files.watcherExclude": {
     "**/target": true
-  }
+}
 }
diff --git a/dependencies.md b/dependencies.md
diff --git a/doc/changes/changes_2.0.12.md b/doc/changes/changes_2.0.12.md
@@ -24,6 +24,10 @@ Netty is an asynchronous event-driven network application framework for rapid de
 * Updated `org.apache.hadoop:hadoop-client:3.4.0` to `3.4.1`
 * Updated `org.apache.parquet:parquet-hadoop:1.14.3` to `1.14.4`
 
+### Runtime Dependency Updates
+
+* Added `io.netty:netty-transport-native-epoll:4.1.115.Final`
+
 ### Test Dependency Updates
 
 * Updated `nl.jqno.equalsverifier:equalsverifier:3.17.1` to `3.17.3`

diff --git a/pom.xml b/pom.xml
@@ -135,6 +135,13 @@
             <artifactId>dnsjava</artifactId>
             <version>3.6.2</version>
         </dependency>
+        <dependency>
+            <!-- Upgrade transitive dependency of org.apache.hadoop:hadoop-client to fix CVE-2024-47535 in io.netty:netty-common -->
+             <groupId>io.netty</groupId>
+             <artifactId>netty-transport-native-epoll</artifactId>
+             <version>4.1.115.Final</version>
+             <scope>runtime</scope>
+        </dependency>
         <dependency>
             <groupId>org.scala-lang</groupId>
             <artifactId>scala-library</artifactId>