From 7703e2c31c309239d6eac1355eff003d88d330ca Mon Sep 17 00:00:00 2001
From: AnuGayan <anushaj@wso2.com>
Date: Tue, 26 Mar 2024 22:51:26 +0530
Subject: [PATCH 1/2] Bump netty version to 4.1.108.Final to fix CVE-2024-29025

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 38a7ce462a..ffc34f74a6 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1585,7 +1585,7 @@
        <activemq.broker.version>5.9.1</activemq.broker.version>
        <slf4j.log4j.version>1.5.2</slf4j.log4j.version>
        <system.rules.version>1.17.0</system.rules.version>
-       <io.netty.version>4.1.104.Final</io.netty.version>
+       <io.netty.version>4.1.108.Final</io.netty.version>
        <transport.http.netty.version>6.3.50</transport.http.netty.version>
        <version.org.wso2.orbit.javax.activation>1.1.1.wso2v3</version.org.wso2.orbit.javax.activation>
        <rabbitmq.version>5.20.0</rabbitmq.version>

From bf14395e2ee65080a1aa5f552ca21e41a6a7cdee Mon Sep 17 00:00:00 2001
From: AnuGayan <anushaj@wso2.com>
Date: Tue, 26 Mar 2024 22:57:36 +0530
Subject: [PATCH 2/2] Bump netty version to 4.1.108.Final to fix CVE-2024-29025

---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index ffc34f74a6..53469959d2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -1586,7 +1586,7 @@
        <slf4j.log4j.version>1.5.2</slf4j.log4j.version>
        <system.rules.version>1.17.0</system.rules.version>
        <io.netty.version>4.1.108.Final</io.netty.version>
-       <transport.http.netty.version>6.3.50</transport.http.netty.version>
+       <transport.http.netty.version>6.3.51</transport.http.netty.version>
        <version.org.wso2.orbit.javax.activation>1.1.1.wso2v3</version.org.wso2.orbit.javax.activation>
        <rabbitmq.version>5.20.0</rabbitmq.version>
        <opentelemetry.all.version>1.11.0.wso2v6</opentelemetry.all.version>