Merge pull request #2169 from AnuGayan/master

Bump netty version to 4.1.108.Final to fix CVE-2024-29025
wso2 · Mar 27, 2024 · 259b61e · 259b61e
2 parents 6ae097e + bf14395
commit 259b61e
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/pom.xml b/pom.xml
@@ -1585,8 +1585,8 @@
        <activemq.broker.version>5.9.1</activemq.broker.version>
        <slf4j.log4j.version>1.5.2</slf4j.log4j.version>
        <system.rules.version>1.17.0</system.rules.version>
-       <io.netty.version>4.1.104.Final</io.netty.version>
-       <transport.http.netty.version>6.3.50</transport.http.netty.version>
+       <io.netty.version>4.1.108.Final</io.netty.version>
+       <transport.http.netty.version>6.3.51</transport.http.netty.version>
        <version.org.wso2.orbit.javax.activation>1.1.1.wso2v3</version.org.wso2.orbit.javax.activation>
        <rabbitmq.version>5.20.0</rabbitmq.version>
        <opentelemetry.all.version>1.11.0.wso2v6</opentelemetry.all.version>