Skip to content

Commit

Permalink
Bump netty from 4.1.74.Final to 4.1.75.Final in /fhir-parent (#3465)
Browse files Browse the repository at this point in the history
* Bump netty-codec-http from 4.1.74.Final to 4.1.75.Final in /fhir-parent

Bumps [netty-codec-http](https://github.com/netty/netty) from 4.1.74.Final to 4.1.75.Final.
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](netty/netty@netty-4.1.74.Final...netty-4.1.75.Final)

---
updated-dependencies:
- dependency-name: io.netty:netty-codec-http
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* bump netty-all as well

Signed-off-by: Lee Surprenant <lmsurpre@us.ibm.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lee Surprenant <lmsurpre@us.ibm.com>
  • Loading branch information
dependabot[bot] and lmsurpre authored Mar 14, 2022
1 parent 297184b commit 3f098bb
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions fhir-parent/pom.xml
Original file line number Diff line number Diff line change
Expand Up @@ -610,15 +610,15 @@
<!-- [CVE-2021-37137] SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way; patched in 4.1.68.Final -->
<groupId>io.netty</groupId>
<artifactId>netty-all</artifactId>
<version>4.1.74.Final</version>
<version>4.1.75.Final</version>
</dependency>
<dependency>
<!-- Used in com.amazonaws:aws-java-sdk which is brought in by com.ibm.stocator:stocator (but marked provided by default) -->
<!-- [CVE-2021-37136] Bzip2Decoder doesn't allow setting size restrictions for decompressed data; patched in 4.1.68.Final -->
<!-- [CVE-2021-37137] SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way; patched in 4.1.68.Final -->
<groupId>io.netty</groupId>
<artifactId>netty-codec-http</artifactId>
<version>4.1.74.Final</version>
<version>4.1.75.Final</version>
</dependency>
<dependency>
<!-- [CVE-2020-8908] A temp directory creation vulnerability exists in all versions of Guava, addressed in latest versions -->
Expand Down

0 comments on commit 3f098bb

Please sign in to comment.